General
- Target Spotify.exe
- Size 18.2MB
- Sample260822-bv22gaem3s
- SHA256 4e0201fe5edb25b3727728330bcd7a7c655d7decc8eeb6e2b956a975ecd0ee5f
- MD5 c93e1fd73b02c76f66d178ed84be1e02
- SHA1 78708acc5dacab1ce67155176ea88d0e77d9f9d1
- SHA512 b9bc74019019ab28639fc367c50ab3d1ae92e68c8325774fec56dc96aa14dca45ff8d8fb5538744415a8eb3e13e6b2ecfec231de86c9e96bfe969a03ba14d531
- SSDEEP 393216:lx1Fdq1B7iwjvLsSWwY94X4TIxxpNB/Fy2siikzCQGHsoqo1pi6:z1Fg1jQx6oTIxH/F1LHzUnT1p
- TLSH T1D817338551E109D3E867D23E919BA462D263BC101B32C9DF0F65875D2E6B3F29D32BE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Spotify.exe
Resource
win10v2004-20260513-en
15 signatures
30 seconds
Behavioral task
behavioral2
Sample
Spotify.exe
Resource
win11ltsc2024-20260709-en
14 signatures
30 seconds
Behavioral task
behavioral3
Sample
launch_dqrkis.pyc
Resource
win10v2004-20260513-en
4 signatures
30 seconds
Behavioral task
behavioral4
Sample
launch_dqrkis.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
30 seconds
Malware Config
Targets
-
- Target Spotify.exe
- Size 18.2MB
- SHA256 4e0201fe5edb25b3727728330bcd7a7c655d7decc8eeb6e2b956a975ecd0ee5f
- MD5 c93e1fd73b02c76f66d178ed84be1e02
- SHA1 78708acc5dacab1ce67155176ea88d0e77d9f9d1
- SHA512 b9bc74019019ab28639fc367c50ab3d1ae92e68c8325774fec56dc96aa14dca45ff8d8fb5538744415a8eb3e13e6b2ecfec231de86c9e96bfe969a03ba14d531
- SSDEEP 393216:lx1Fdq1B7iwjvLsSWwY94X4TIxxpNB/Fy2siikzCQGHsoqo1pi6:z1Fg1jQx6oTIxH/F1LHzUnT1p
- TLSH T1D817338551E109D3E867D23E919BA462D263BC101B32C9DF0F65875D2E6B3F29D32BE0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Uses browser remote debugging
Can be used to control the browser and steal sensitive information such as credentials and session cookies.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
- Target launch_dqrkis.pyc
- Size 8KB
- SHA256 d547c7f05cfe19011676ccfe44d773af07efdf441ef14e27f9f89f500b38a823
- MD5 11846f99b991e8fb1559d2377f075987
- SHA1 08c517ff22018e0c6761408deea247ddb70933ee
- SHA512 d2a315a9ce07c1af0e0b098e6a9a9db8db111234ac31997d75e4523f9c6adbc03b08758e419922170fd3d3ede3f3a972b494918914ecf8697dce22fac71fe667
- SSDEEP 192:c9wX/URb/FjEPpMWp64f8Uf9w9jEdslJS:FsFePpMaf9w9G
- TLSH T13C02E7B448A4343BEADDE13872E3C2C8B750C28179109A17E8385C787DD55ABB31235F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10