General

  • Target

    qpcdJ5

  • Size

    510B

  • Sample

    241012-x2jdlaxbqd

  • MD5

    34dfe83879df859819b3dc1690b2c298

  • SHA1

    98ca2a16b44d8a9f047a4a4c377f3d8b11b74430

  • SHA256

    a17b38aaaae6a424289facf5e413298184151b21a4819a62ee5c134f8026e9de

  • SHA512

    de7864202c55038fd05f6be54ad1ffdb75ea721c18d93c2c942b9da398b7f20358d9d0e97d1afde7a145d9b6c54c52a7f4cd8a04285dd3eb34b2f21bdcf915c1

Malware Config

Targets

    • Target

      qpcdJ5

    • Size

      510B

    • MD5

      34dfe83879df859819b3dc1690b2c298

    • SHA1

      98ca2a16b44d8a9f047a4a4c377f3d8b11b74430

    • SHA256

      a17b38aaaae6a424289facf5e413298184151b21a4819a62ee5c134f8026e9de

    • SHA512

      de7864202c55038fd05f6be54ad1ffdb75ea721c18d93c2c942b9da398b7f20358d9d0e97d1afde7a145d9b6c54c52a7f4cd8a04285dd3eb34b2f21bdcf915c1

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks