Overview

overview

10

Static

static

10

Qsr7YteuS.exe

windows10-ltsc 2021-x64

10

9<����.pyc

windows10-ltsc 2021-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Qsr7YteuS.exe

  • Size

    6.9MB

  • Sample

    241025-233k3sxcpj

  • MD5

    992db1843fa3b9ecb41c21cf0f2e6bb3

  • SHA1

    ec27c5a987e0cb6e6684e82a411d99823d978db4

  • SHA256

    15eb82e01bff66f9070d3efa1c5549f7268c5d2917abad748b243a3653b5ba2d

  • SHA512

    152959d38f8fe5c0481c1b46ec61a8451fda9d9033a0e76fe7913aaf841e8fa2aaf1a168e02ffa445c4ae86772d029838fff27cdb588a55fa60182df713f34c7

  • SSDEEP

    98304:8g+zHqdVfB2FS2/KyuT/9vUIdD9C+z3zO917vOTh+ezDNh7w8mJ1nmOBr9n4m9t9:83QsobT/9bvLz3S1bA3zIn9VDj

Score
10/10
blankgrabberevasionexecutionupx

Malware Config

Targets

    • Target

      Qsr7YteuS.exe

    • Size

      6.9MB

    • MD5

      992db1843fa3b9ecb41c21cf0f2e6bb3

    • SHA1

      ec27c5a987e0cb6e6684e82a411d99823d978db4

    • SHA256

      15eb82e01bff66f9070d3efa1c5549f7268c5d2917abad748b243a3653b5ba2d

    • SHA512

      152959d38f8fe5c0481c1b46ec61a8451fda9d9033a0e76fe7913aaf841e8fa2aaf1a168e02ffa445c4ae86772d029838fff27cdb588a55fa60182df713f34c7

    • SSDEEP

      98304:8g+zHqdVfB2FS2/KyuT/9vUIdD9C+z3zO917vOTh+ezDNh7w8mJ1nmOBr9n4m9t9:83QsobT/9bvLz3S1bA3zIn9VDj

    Score
    10/10
    evasionexecutionupx

    • Deletes Windows Defender Definitions

      Uses mpcmdrun utility to delete all AV definitions.

      evasion

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

    • Target

      9<����.pyc

    • Size

      1KB

    • MD5

      44dd406f84071a666de10c8ef39bf8c6

    • SHA1

      f1ea2e36d29015ee7bc0219c00e92fc1ea7ff252

    • SHA256

      5c739d0bc713e51cb9f99271fe8a81726336330c67c616e2973bc118a3ae0d5b

    • SHA512

      c73a0e6bef599d445d660ec8cd31f247aebd36ad1d46dac060072dc1e103d190e3e186d960ccb376a51b27843fc93e78b62bc933ca21613b7065feadbab055a5

    Score
    1/10
    behavioral2

MITRE ATT&CK Enterprise v15

Tasks