General
- Target QuestCore.exe
- Size 131KB
- Sample260730-znaweaxbkd
- SHA256 27a6e5d837b310bb9b0a555dd29dc4824604b43f8995daa095aeb29f4e644861
- MD5 34d15c07053ff417121348c899118ecc
- SHA1 5fe4613787f905ef0be89ffae5fe637462632694
- SHA512 dc98e810e7ede334a9d90381dca2d232a743f501c2506043b267dcfc382012ecbfdc71b9a49bd43b027ff04af26264614a234066befed1926422ffeed9f33d02
- SSDEEP 1536:indm0ibwIR+5vYyHb9HusQSIjoJS3mkDyLoO5/47BeZOliJDSajXAlhbWcIJ:indm5wIRZiOsQSIjfmkDlUQlgbgbLk
- TLSH T12CD31F4176FA4608F2BA6F789AB715640B7BB91A5C39C20D098D948E0FF3F409C75B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
QuestCore.exe
Resource
win10ltsc2021-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target QuestCore.exe
- Size 131KB
- SHA256 27a6e5d837b310bb9b0a555dd29dc4824604b43f8995daa095aeb29f4e644861
- MD5 34d15c07053ff417121348c899118ecc
- SHA1 5fe4613787f905ef0be89ffae5fe637462632694
- SHA512 dc98e810e7ede334a9d90381dca2d232a743f501c2506043b267dcfc382012ecbfdc71b9a49bd43b027ff04af26264614a234066befed1926422ffeed9f33d02
- SSDEEP 1536:indm0ibwIR+5vYyHb9HusQSIjoJS3mkDyLoO5/47BeZOliJDSajXAlhbWcIJ:indm5wIRZiOsQSIjfmkDlUQlgbgbLk
- TLSH T12CD31F4176FA4608F2BA6F789AB715640B7BB91A5C39C20D098D948E0FF3F409C75B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.