General

  • Target

    quickassist.exe

  • Size

    758KB

  • Sample

    240524-pwejfscf4z

  • MD5

    e0a5164f6d058dcc068b32867e542b0a

  • SHA1

    ae7bc4fd7a893e6cc04129584340363a5ac4f9b0

  • SHA256

    8837ea86ad08afc73615b492ced6cf16343f0adfd78869cce30809d5df73b8d8

  • SHA512

    a8f096b311a93f9e54912f1e7e9609f2dcc9f57d026264fb6ce670a965bbf07bf8eabd2415d0fc85e0e21fa22dadbf7110046876c14185de4507116c29c7af16

  • SSDEEP

    12288:Xnem1Gz7V2oGlx/y8nHLOELqhsDHLVj0B/rGs/vAwil1GaQDN2Z0CbbOfpWH+EMd:Xh1Gz7V2oCVnLOELqhsbLVjqrGuvg1G7

Malware Config

Targets

    • Target

      quickassist.exe

    • Size

      758KB

    • MD5

      e0a5164f6d058dcc068b32867e542b0a

    • SHA1

      ae7bc4fd7a893e6cc04129584340363a5ac4f9b0

    • SHA256

      8837ea86ad08afc73615b492ced6cf16343f0adfd78869cce30809d5df73b8d8

    • SHA512

      a8f096b311a93f9e54912f1e7e9609f2dcc9f57d026264fb6ce670a965bbf07bf8eabd2415d0fc85e0e21fa22dadbf7110046876c14185de4507116c29c7af16

    • SSDEEP

      12288:Xnem1Gz7V2oGlx/y8nHLOELqhsDHLVj0B/rGs/vAwil1GaQDN2Z0CbbOfpWH+EMd:Xh1Gz7V2oCVnLOELqhsbLVjqrGuvg1G7

    • Downloads MZ/PE file

    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks