Overview
overview
8Static
static
7v2_builds_...er.exe
windows7-x64
3v2_builds_...er.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...up.exe
windows7-x64
8$PLUGINSDI...up.exe
windows10-2004-x64
8QuiverPhotos.exe
windows7-x64
7QuiverPhotos.exe
windows10-2004-x64
8Analysis
- max time kernel
118s - max time network
120s - platform
windows7_x64 - resource
win7-20240704-en - resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system - submitted
09/07/2024, 21:37
Behavioral task
behavioral1
Sample
v2_builds_latest_QuiverPhotos-amd64-installer.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
v2_builds_latest_QuiverPhotos-amd64-installer.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/webview2bootstrapper/MicrosoftEdgeWebview2Setup.exe
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/webview2bootstrapper/MicrosoftEdgeWebview2Setup.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
QuiverPhotos.exe
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
QuiverPhotos.exe
Resource
win10v2004-20240709-en
General
- Target QuiverPhotos.exe
- Size 13.2MB
- Sample240709-1gr2saxclm
- SHA256 9abc771cc6af7025e4c42e474aa5c9beb2a32a2bd3136914022fe3af2f242fe6
- MD5 6780eae3b57fd18e332df211a10d3147
- SHA1 590cf39c0a17b17df783c8b6d161a0d864eb19cb
- SHA512 f5db53bae0626946a5d6adfb3e418e71b824d0d2f174ed7fb27368c3dbd72e0b584da899ef7dfc0ca68197e08614737a6519905ed0fe4c43e4e54c88a331b96f
- SSDEEP 393216:Oj6sA/GxuA60if1PutEdrClQ//mlZ6X0uqPj:ie0iluYrCq/er1P
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
resource yara_rule behavioral9/memory/2852-1-0x0000000000B30000-0x00000000032E2000-memory.dmp upx behavioral9/memory/2852-0-0x0000000000B30000-0x00000000032E2000-memory.dmp upx