a7cf881a3acda28b94a609dea933bac04a5db7d95ba5402b9fa844c0fc1cb1e7

General

Target
qT-EmbedSetup.exe
Size 24.3MB
Sample260705-2rzeaags2s
SHA256 a7cf881a3acda28b94a609dea933bac04a5db7d95ba5402b9fa844c0fc1cb1e7
MD5 b44bf01ba49e933ff193a6409c2bf0b6
SHA1 0c7766563e652792a9b8f19b75b435ff457df7a5
SHA512 101e2ff80a5da594a37e2a7343274499bc0a3ca0c351aaf0f01c2cd1ecd1b0f4a5335c17ba68787150cfd647747aa3e831fedd66ac64931a629c204c9f9f7170
SSDEEP 393216:r/+ONfr91LzU/ejqg6p8WD2LF36W7YPrAgs1E/guFBSroipzeNblnXJUDu5K:rlfPUe2dp8WKLZ6fPcgsnu3YdOJXyq5K
TLSH
T1EA473300F438C955FEF955F527460A3B3F6FAD2461E8006E93D4E23A70A83EA7990B5D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  qT-EmbedSetup.exe
- Size 24.3MB
- SHA256 a7cf881a3acda28b94a609dea933bac04a5db7d95ba5402b9fa844c0fc1cb1e7
- MD5 b44bf01ba49e933ff193a6409c2bf0b6
- SHA1 0c7766563e652792a9b8f19b75b435ff457df7a5
- SHA512 101e2ff80a5da594a37e2a7343274499bc0a3ca0c351aaf0f01c2cd1ecd1b0f4a5335c17ba68787150cfd647747aa3e831fedd66ac64931a629c204c9f9f7170
- SSDEEP 393216:r/+ONfr91LzU/ejqg6p8WD2LF36W7YPrAgs1E/guFBSroipzeNblnXJUDu5K:rlfPUe2dp8WKLZ6fPcgsnu3YdOJXyq5K
- TLSH
  T1EA473300F438C955FEF955F527460A3B3F6FAD2461E8006E93D4E23A70A83EA7990B5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1
- Target
  translations/qt_uk.qm
- Size 228KB
- SHA256 cb981fe155d09b19633964c246cc1f97d66c6fe037a7863d5a36c1c04d77e839
- MD5 a97f5c8c703c5feba0c64acab3556da0
- SHA1 43d2a3e557cfa6a1746c7e5960b5372cf65b9109
- SHA512 4a6bbf652720ca2c949061f673d7e4cb47e27f27c8817bfdcde61545dc5110809ef1aed777f321458318d91f76dff11b5b79ee63a7569b981e0f202909c2f4e0
- SSDEEP 3072:OaCRY/D9zDPTzqw5pCvJ8hV9FBF5lZpSXP6lvj3pZ:OaaY/p55pAJ835TpZ
- TLSH
  T1623494497ABE6104F6A1D1BA0B4780D3872DB46811B188CBF74DBD7410AC67E772BAC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral2
- Target
  translations/qt_zh_CN.qm
- Size 196KB
- SHA256 1d4d1a15706d24c9853cfa90661624be98c3d7ba7d4e5dcac77a228fff54b73c
- MD5 7b733c545267b2d1aeb942220bdf551d
- SHA1 dd6e741c0845448a31659855afb330d7cd13ff1b
- SHA512 aa9cd075f791e5512d7dae0a9727dc527c3c5791afa17273a1c9a14c3a154ffda056db101be55db7c50c375516f96abfb695032d35b852d96a8c6ec2121cbafb
- SSDEEP 3072:wdwRSxkjix/lyqPe/OBPyTRYYvmoh19zUvIGfEP48Axbc8Zm7:wdwarJI+ARvOm1Wveyc8Ze
- TLSH
  T11C144CE533B83415F2A1907D931BC600DF6215696271DE0BDBA0FE38219585ABE2FBC7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral3
- Target
  translations/qt_zh_TW.qm
- Size 123KB
- SHA256 4e73b9103c0da6b81d31c7f3c3c564addd53b68c0690233c77d99725cfa7fddc
- MD5 7262f14e5f0565b5089900a9f9b35f05
- SHA1 85c66f4889a991f73c0f5209362eef01dc227734
- SHA512 24052f156f9bf147222d84de2b02de09567856f5278b8e77ad811bfd4b5ffa4b211232a437048d870b6b764bdf2ec617d6664885b407ecc4212db2a0779b5214
- SSDEEP 3072:MwAMP10JBOs6ZcFOsJoRqaWFzerP5P8pT:ZAYs6uFOEoY/x28pT
- TLSH
  T1FEC3189679F9305AFAA1507E5307C301DF62053DA272EE07EB44BD38216584FBE2F682
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral4
- Target
  uninstall.exe
- Size 59KB
- SHA256 67b57825f0cb3ca75e3b162e632bece2140f681e442eee65cbac93e860f95e18
- MD5 2f08b5e49f64542b9a64c09e1d8129c1
- SHA1 d042aaf02985539a02c7e61943d679fd4905f968
- SHA512 cbc8ffd45a6f0ad9699a307b0b9f4edc4c873fdfa9d41ff44387c86cd9f998e021d0a4c079d35d2ea8c519f9c041001bc3c1c363c922b8e67014b8bbd18e6424
- SSDEEP 1536:hrlnJVfjAMrwIK6klYjak7u4wghBKsmWLvYKpr:ZlnffjVrwUak7uSBKBW8Kpr
- TLSH
  T12653B041B7F4C8B7C96206309EB75B736FFAE51212A4470B1300AFAD7D62681DE1E762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Deletes itself
- Executes dropped EXE
behavioral5