General
- Target win32-quickq.exe
- Size 97.7MB
- Sample260814-c965easzfz
- SHA256 e2f034103fee432f5a0d6e79e56f06c9df5d9cb2c6b56ffe4eea85c7213eb4ac
- MD5 c2a0627fcaf9f749dcfd3bf06a9bdc43
- SHA1 abc3176c5abf5dc3cfc0c16d6f8b16125a7bdd74
- SHA512 58e8ede974d94ee4e063702a28afd80c316767ab0a89af1025f0dfbddf28ae58de84c0c5b38afb10441185d5ef03bd23b4060f52f3ac60b9dbce11c25eca9e3a
- SSDEEP 3145728:aB+Jekz2IV5764YhnE65oYDsLqfhSGDILhGXvF4uHw3:aXV8vLesuZSGDFvF43
- TLSH T15D283346E2E9C8FBDA871878899A2B1DF6BB7CF10255ED3702A0339F4D3464A0D5C791
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
win32-quickq.exe
Resource
win10v2004-20260513-en
16 signatures
300 seconds
Behavioral task
behavioral2
Sample
win32-quickq.exe
Resource
win10ltsc2021-20260513-en
16 signatures
300 seconds
Behavioral task
behavioral3
Sample
win32-quickq.exe
Resource
win11-20260513-en
15 signatures
300 seconds
Behavioral task
behavioral4
Sample
win32-quickq.exe
Resource
win11ltsc2024-20260709-en
17 signatures
300 seconds
Malware Config
Targets
-
- Target win32-quickq.exe
- Size 97.7MB
- SHA256 e2f034103fee432f5a0d6e79e56f06c9df5d9cb2c6b56ffe4eea85c7213eb4ac
- MD5 c2a0627fcaf9f749dcfd3bf06a9bdc43
- SHA1 abc3176c5abf5dc3cfc0c16d6f8b16125a7bdd74
- SHA512 58e8ede974d94ee4e063702a28afd80c316767ab0a89af1025f0dfbddf28ae58de84c0c5b38afb10441185d5ef03bd23b4060f52f3ac60b9dbce11c25eca9e3a
- SSDEEP 3145728:aB+Jekz2IV5764YhnE65oYDsLqfhSGDILhGXvF4uHw3:aXV8vLesuZSGDFvF43
- TLSH T15D283346E2E9C8FBDA871878899A2B1DF6BB7CF10255ED3702A0339F4D3464A0D5C791
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)