Analysis

  • max time kernel
    102s
  • max time network
    95s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/10/2024, 12:40

General

  • Target

    EpicQuesters.exe

  • Size

    64.5MB

  • MD5

    f89c7d2ed136f238109d17c6c06c8bc5

  • SHA1

    1d9d459b6d325307a3fd3e8fee63e2a17af2b859

  • SHA256

    38caa996db796da124db6ef209ffc5708be4a27300dfc3580523c4e555c9962f

  • SHA512

    7daba8dee78f13765e20ba28377a6cd7e39c6d9c4b8010fb80610ae26dc5e937ea187f2cf9416a98599ed25c8ae819aeaae298ec9016cc61121a2d7281f26477

  • SSDEEP

    393216:29psB/yNOagWpWE+dPLaD2OcJw7x9Z/6IYFckFyQRHROv8Qshg9owh0IaG/1qaCI:2/sN+pWe2O0w7xEXRyEQshqXhhOaQuU0

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\EpicQuesters.exe
    "C:\Users\Admin\AppData\Local\Temp\EpicQuesters.exe"
    1⤵
      PID:3048

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Roaming\EpicQuest\EqLauncherConfig.eqcfg

      Filesize

      112B

      MD5

      99a0e0b95b4c61f1b2cb6ebce8bb786e

      SHA1

      67861ad76f5927f3861a6c64a74ef2a0acb22b43

      SHA256

      eb4fcc7d4a71cba67ab5a0faec5306b2a7ce1dd0a8328aaa445f5b31f6a38c1b

      SHA512

      203e39d86365bb9fac19804212db66ae9142bc72e5d6f766f72ac140d2956d22d0a07b47ba9fe7d13df1cf716aba79ba355547b7be8f3cd27b75e1cb31ea9ca3

    • C:\Users\Admin\AppData\Roaming\EpicQuest\EqLauncherConfig.eqcfg

      Filesize

      166B

      MD5

      1032b8ef9ccd8ab46d12078237663cae

      SHA1

      8225263e1822215ccadb1a4011e62f5376a9bf5f

      SHA256

      2167ac9bbca6830832934ccba70e09a6e9d9767f93e6aef04f2ec57c9c74041f

      SHA512

      03700ec7f58844f96016d9bd86658435c84bb97f272e26c2670d30e164825651480b68e87fd9a101cdd2bf0e23e41ad2eb6e187e71e5b06c92a1f0e2c8a9b4a7

    • C:\Users\Admin\AppData\Roaming\EpicQuest\EqLauncherConfig.eqcfg

      Filesize

      216B

      MD5

      01880f9afc07edb2e63b6f8033325b80

      SHA1

      17a42a8f957199c9d818cd18ee43d065760274f8

      SHA256

      4fd35e6cebffee2b69ed4b7362b8eceb79c0bcf6771c39967b399148f940d328

      SHA512

      0c426cbd508a499e2a0f0549af424a2f85b4239208710db0da14af2836ee31233952d7e3da73c76ad6827059762a1e8ac7d70ccfa6ab49bf2918b61846e2a3d7

    • C:\Users\Admin\AppData\Roaming\EpicQuest\EqLauncherConfig.eqcfg

      Filesize

      232B

      MD5

      c71a095629092fa480b645ff160758fe

      SHA1

      2a712678e4239d9e5ad3f3ef36b0c77ddbf9e289

      SHA256

      e9061f7b811ff84fd3c5216879afa0368f39740ab8ed92eefe7f271ecaf33749

      SHA512

      5b1175cc034c07d8ad54a77203b82d64013e50731bd3a74eb4a54e07922174af7655e61f06210f3540e31aee93a58739fc90eca6ea48b5b2a8d03f5d305c2f88

    • C:\Users\Admin\AppData\Roaming\EpicQuest\EqLauncherConfig.eqcfg

      Filesize

      31B

      MD5

      758ece0f5a3920c544bf4f7d1ff21cbc

      SHA1

      c3d1379538ffe40cd4cd5357a0e5bda1b67ed82d

      SHA256

      bf25e210d9145b448fac74c72f8e734fe3236dc36d37ccc3136aa21e1df4c208

      SHA512

      06037b56174035331215c1bafb528c15cb994ee33bec18b4bb1ddfd7a6cd9c275f5e65c7e02bdf8e1457625c961c1ffd3b7d8bcb6f01cfe727324af804f41e5e

    • C:\Users\Admin\AppData\Roaming\EpicQuest\EqLauncherConfig.eqcfg

      Filesize

      416B

      MD5

      4c0f1cb267c83ae710fe0cc175c53cc7

      SHA1

      39abd7f3e1563c0c72095a4ac2e6837cfce89a31

      SHA256

      d3ff3ac1c898e86da37e3e7ae0201e13547bd7f4ebc7315ce2fa0ea1d583ce2e

      SHA512

      1ed20f26c9e8d9ff36e23b69da3d378d51aaa9e0441a8ded32fe79279d9643759e1528f2e335485579c9a7a8b0f9ea4c44633c3152c81aeb603e693cc2d74e45