Overview

overview

7

Static

static

7

zqxst.exe

windows7-x64

7

zqxst.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de6632d001952744ca9a7753fadfd60d_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240913-r337havckf

  • MD5

    de6632d001952744ca9a7753fadfd60d

  • SHA1

    f5380d0c507cad9b6c6264d6935da39d09fdc324

  • SHA256

    2808cb85a0edc87b2127bff5170bcec6402e0f9ae1cdb2bb7d87f4cf32607271

  • SHA512

    54009348862492c1ec5b3619bb51f8ba21f6c585a76dee4a110be4eecd3f15d980c0f56b1c0610afd09efac8ba239caeca136eb3b790d9f381e09220fc774935

  • SSDEEP

    24576:GOwhLynIJ5RYS4pK2bK6Kq+8a5bARCT/0JfN/QiRghP9ELu0ygYyX0pK:RgLyIJQS406R+BlkCTMJfNY1FEi0yVM

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      zqxst.exe

    • Size

      1.1MB

    • MD5

      94846a45b85e81716436331590f28c24

    • SHA1

      afbab5c313ac2700896de586e2bc6ab754f3e2a5

    • SHA256

      9a27d3b15c676ffd8b4a782d2606abdc76e9d543cc08131d3623e06ca9f04821

    • SHA512

      2cd4b08631f78a2fc9cd6fa88a5c1c3b3f48c9221723fda6f2ae319fa969df233fff6daf5bfd92068decce8ab57d5b0b3667908b40dc54a8d4142d6a58611e4d

    • SSDEEP

      24576:04hGSaNuhHixn3PQOjqSu15VetYaKWUQSjMq0UJcak0Ca:0MFyQcMwYvfM/o

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks