Overview
overview
8Static
static
7v2_builds_...er.exe
windows7-x64
3v2_builds_...er.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...up.exe
windows7-x64
8$PLUGINSDI...up.exe
windows10-2004-x64
8QuiverPhotos.exe
windows7-x64
7QuiverPhotos.exe
windows10-2004-x64
8Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
09/07/2024, 21:37
Behavioral task
behavioral1
Sample
v2_builds_latest_QuiverPhotos-amd64-installer.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
v2_builds_latest_QuiverPhotos-amd64-installer.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/webview2bootstrapper/MicrosoftEdgeWebview2Setup.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/webview2bootstrapper/MicrosoftEdgeWebview2Setup.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
QuiverPhotos.exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
QuiverPhotos.exe
Resource
win10v2004-20240709-en
General
-
Target
QuiverPhotos.exe
-
Size
13.2MB
-
MD5
6780eae3b57fd18e332df211a10d3147
-
SHA1
590cf39c0a17b17df783c8b6d161a0d864eb19cb
-
SHA256
9abc771cc6af7025e4c42e474aa5c9beb2a32a2bd3136914022fe3af2f242fe6
-
SHA512
f5db53bae0626946a5d6adfb3e418e71b824d0d2f174ed7fb27368c3dbd72e0b584da899ef7dfc0ca68197e08614737a6519905ed0fe4c43e4e54c88a331b96f
-
SSDEEP
393216:Oj6sA/GxuA60if1PutEdrClQ//mlZ6X0uqPj:ie0iluYrCq/er1P
Malware Config
Signatures
-
resource yara_rule behavioral9/memory/2852-1-0x0000000000B30000-0x00000000032E2000-memory.dmp upx behavioral9/memory/2852-0-0x0000000000B30000-0x00000000032E2000-memory.dmp upx