Overview

overview

6

Static

static

1

quest serv...dge.js

windows10-2004-x64

3

quest serv...dge.js

windows11-ltsc_2024-x64

3

quest serv...ute.js

windows10-2004-x64

3

quest serv...ute.js

windows11-ltsc_2024-x64

3

quest serv...rs.bat

windows10-2004-x64

1

quest serv...rs.bat

windows11-ltsc_2024-x64

1

quest serv...ols.ts

windows10-2004-x64

6

quest serv...ols.ts

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    quest servers fixed (2).zip
  • Size 36KB
  • Sample260712-1a2bwag17j
  • SHA256 5d92271ebffa2a4268891d7b3fa2db7bf8fa2cf89f8b75e68d2f6fcb1230dafe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryexecution

Malware Config

Targets

    • Target
      quest servers fixed/ac_bridge.js
    • Size 165KB
    • SHA256 05dad6a55e6df618e03c7e0cc9a609a7df4f38ec2e657b6f0a11e7a0a0915777
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral1behavioral2
    • Target
      quest servers fixed/m4literallymadethisinaminute.ts
    • Size 548B
    • SHA256 1266f00c9e90adadf97a7531e4d8ac18c7acf195894fa37ed90ec3845c37c7af
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      quest servers fixed/questservers.bat
    • Size 90B
    • SHA256 759d8e57846cb7e4bc1f1d1a4763d4744a25161edecb2dceecd2f094c8a4c216
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      quest servers fixed/symbols.ts
    • Size 18KB
    • SHA256 a6cc80b617126288c05fd8c5dd99bf25a3b854840f328c7db48e72fb774ccf0e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks