Overview

overview

10

Static

static

3

QUOTE--GEI...00.exe

windows7-x64

6

QUOTE--GEI...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55c5f7bee2f7aa21af17091a599fdeeb49f890495971f77624c100c10ccd57a0.rar

  • Size

    1.5MB

  • Sample

    240921-bqvftsycqg

  • MD5

    01c1e9b76b0e1d5f15064a8b98f0ab62

  • SHA1

    8d0f1821fcc3b3702c112fae50d0ff73d4b42eb5

  • SHA256

    55c5f7bee2f7aa21af17091a599fdeeb49f890495971f77624c100c10ccd57a0

  • SHA512

    0ff3b658f0c47e2ec1d367ba4ed2225262c6656ef47c945ed1042f8bc036617f74915f1b50f3a48f315cc986ffbef8407c41d848dc9c1323a83a8dcd869a51fa

  • SSDEEP

    24576:OdNgoNK42xQnY+V2KvLHLx/ZtimXbZ50vGEaG3LK+JtP/iuRHUBr2fvSBYvplbvq:OdLF20Lhbi24d/iQSDEXbS

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      QUOTE--GEI REF 2177700.exe

    • Size

      1.6MB

    • MD5

      e6541de7863192d1e3a5d356cbd28f2c

    • SHA1

      e6782e4096c1c75c8bf6d3434ccbe07f84105939

    • SHA256

      a0f7e47a92a904690c365a47054a187313a4cb4d1eb1db0f6767d0c34a6101c5

    • SHA512

      b44223a368a0e6210a16f99e93e3babdcff162b293bd303bbf1bd28bc3b88bff933793a5bfaefb4dfe13a6f29ea472974b65c2ae85c2d97a0124644300d4c56e

    • SSDEEP

      49152:oni62dqTUUxZvFQHzC1Teav6O7KcZu76:KihdqTUUHFspav6jcZ2

    Score
    10/10
    discoverypersistence

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks