qqpass

Resubmissions

28/03/2025, 07:30

250328-jbs88avnz6 10

28/03/2025, 07:13

250328-h19f3aszft 10

Sharing

Copy URL

Twitter E-mail

General

Target

8647111d149ae2fc3ba2394bc9db08ab1146fafa507de56b0e4eef4ceee30893
Size

78KB
Sample

250328-jbs88avnz6
MD5

f7c6a8950ab6783ce81f61fafb6feaf1
SHA1

457fa5c2676d5dcb0cdb0ec8426ab2e26e9092a7
SHA256

8647111d149ae2fc3ba2394bc9db08ab1146fafa507de56b0e4eef4ceee30893
SHA512

d09cb9217e1095f8927a8b42c57b7d87af42a447ece581ad3c02c94884e703cd69777b5e93893e3b06878b493a9e3f080d8e042829fbc5cde42cd73d35121acf
SSDEEP

1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOzOnc:GhfxHNIreQm+HiGOnc

Score

10^/10

Malware Config

Extracted

Family

qqpass

http://www.zigui.org/article.php?id=103822

Attributes

url
http://www.mxm9191.com/myrunner_up.exe
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

Targets

- Target
  
  8647111d149ae2fc3ba2394bc9db08ab1146fafa507de56b0e4eef4ceee30893
- Size
  
  78KB
- MD5
  
  f7c6a8950ab6783ce81f61fafb6feaf1
- SHA1
  
  457fa5c2676d5dcb0cdb0ec8426ab2e26e9092a7
- SHA256
  
  8647111d149ae2fc3ba2394bc9db08ab1146fafa507de56b0e4eef4ceee30893
- SHA512
  
  d09cb9217e1095f8927a8b42c57b7d87af42a447ece581ad3c02c94884e703cd69777b5e93893e3b06878b493a9e3f080d8e042829fbc5cde42cd73d35121acf
- SSDEEP
  
  1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOzOnc:GhfxHNIreQm+HiGOnc
Score

10^/10

qqpass discovery persistence trojan
- QQpass
  QQpass is a trojan written in C++..
  trojan qqpass
- Qqpass family
  qqpass
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral10 behavioral11 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Privilege Escalation

Event Triggered Execution

T1546

Change Default File Association

T1546.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Extracted

Targets

Qqpass family

Executes dropped EXE

Loads dropped DLL

Modifies system executable filetype association

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11