Analysis
-
max time kernel
13s -
max time network
12s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
14-10-2024 17:40
General
-
Target
QB-Spoofer.exe
-
Size
1.5MB
-
MD5
258909037df5f213115b70a3ed86177e
-
SHA1
8149c5199ca238b22dbf2b22f209ea3afa699feb
-
SHA256
5cdafad615179353cd64c2b7bbed04802c7fcc82c2c934f5ead01602cc0d46c7
-
SHA512
3f3576052cfdc57d65eb386b5da8dfb26023ff0a02810130f994d96e41d5e84bfda23eee92d1a57467e215fcc965eab5dad539e513940e5034e4354d3dea2ee0
-
SSDEEP
24576:ffCW/QTcdOBw2WTQcPTAcySiDNpfVkqgfPyU8/oa8reuaDQkqjVnlqud+/2P+ANm:X9/QTNw2y70nS4pfVkqgy6r3askqXfdj
Score
1/10
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\QB-Spoofer.exe"C:\Users\Admin\AppData\Local\Temp\QB-Spoofer.exe"1⤵
- Enumerates system info in registry
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
1.5MB
-
Filesize
72KB
-
Filesize
2.1MB
-
Filesize
10.8MB
-
Filesize
712KB
-
Filesize
136KB
-
Filesize
240KB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB