Overview
overview
3Static
static
3qucs-0.0.1...t4.dll
windows7-x64
3qucs-0.0.1...t4.dll
windows10-2004-x64
3qucs-0.0.1...e4.dll
windows7-x64
3qucs-0.0.1...e4.dll
windows10-2004-x64
3qucs-0.0.1...i4.dll
windows7-x64
3qucs-0.0.1...i4.dll
windows10-2004-x64
3qucs-0.0.1...k4.dll
windows7-x64
3qucs-0.0.1...k4.dll
windows10-2004-x64
3qucs-0.0.1...t4.dll
windows7-x64
3qucs-0.0.1...t4.dll
windows10-2004-x64
3qucs-0.0.1...l4.dll
windows7-x64
3qucs-0.0.1...l4.dll
windows10-2004-x64
3qucs-0.0.1...g4.dll
windows7-x64
3qucs-0.0.1...g4.dll
windows10-2004-x64
3qucs-0.0.1...l4.dll
windows7-x64
3qucs-0.0.1...l4.dll
windows10-2004-x64
3qucs-0.0.1...ck.exe
windows7-x64
1qucs-0.0.1...ck.exe
windows10-2004-x64
1qucs-0.0.1...ml.exe
windows7-x64
3qucs-0.0.1...ml.exe
windows10-2004-x64
3qucs-0.0.1...er.exe
windows7-x64
1qucs-0.0.1...er.exe
windows10-2004-x64
3qucs-0.0.1...st.exe
windows7-x64
1qucs-0.0.1...st.exe
windows10-2004-x64
3qucs-0.0.1...co.exe
windows7-x64
1qucs-0.0.1...co.exe
windows10-2004-x64
3qucs-0.0.1...cc.exe
windows7-x64
1qucs-0.0.1...cc.exe
windows10-2004-x64
3qucs-0.0.1.../gvhdl
ubuntu-18.04-amd64
1qucs-0.0.1.../gvhdl
debian-9-armhf
1qucs-0.0.1.../gvhdl
debian-9-mips
1qucs-0.0.1.../gvhdl
debian-9-mipsel
1Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
01-09-2024 09:27
Static task
static1
Behavioral task
behavioral1
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/Qt3Support4.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/Qt3Support4.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/QtCore4.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/QtCore4.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/QtGui4.dll
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/QtGui4.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/QtNetwork4.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/QtNetwork4.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/QtScript4.dll
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/QtScript4.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/QtSql4.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/QtSql4.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/QtSvg4.dll
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/QtSvg4.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/QtXml4.dll
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/QtXml4.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/admsCheck.exe
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/admsCheck.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/admsXml.exe
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/admsXml.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/alter.exe
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/alter.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/asco-test.exe
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/asco-test.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/asco.exe
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/asco.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/freehdl-v2cc.exe
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/freehdl-v2cc.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/gvhdl
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral30
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/gvhdl
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral31
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/gvhdl
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral32
Sample
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/gvhdl
Resource
debian9-mipsel-20240418-en
General
-
Target
qucs-0.0.19-win32-mingw482-asco-freehdl-adms/bin/asco.exe
-
Size
122KB
-
MD5
f84869bedfe85e155fd4e904f14a91a2
-
SHA1
7b101002470c4b126313ffae3ed12e620aa4fdb1
-
SHA256
fe9295021c7bfac71f7f42a12a2fb51ff5d5d4770c43e644dd4190c35b168d8e
-
SHA512
0070c84ecd6021b4fb70ca935f4e90135346b499aefd6d2596bc20c333c9e24b8c44e73507c0f3879087ae07a4ab3f85d65a921b2274e5b9fa567e7bb29f798e
-
SSDEEP
1536:R5Xs1I0qv9n+7c0KeEzUOZ4COeNrYcFuSxQ7tS19XqHkqkOPF2WaDv6:/s1Pqv90KLzUOgynJ19abkIZaD
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language asco.exe