General
- Target Quakeganza.exe
- Size 364KB
- Sample260822-wldbzaap7y
- SHA256 a6ddede60a43769cb19f4fb8de41160c769ae5a58d6e72de6126c3502ed9991e
- MD5 754a2aedcf67ea7a42033e1ec45240dd
- SHA1 04c00d8a8aedfcae241f5dcf1b5a2226dbe869d8
- SHA512 040d52c5b810e083f34aa15f3f97c498364856842b105878c4b83d324150501354f0137fdc5a0e7322dd1e691aaad270dd19ff793e8d58e2185f3ed9dbbdfb5a
- SSDEEP 3072:8GWCGPVHzzgd2HPVVf9AebuLFfK9s7IYNgDd9gGKI+LNTzxVMoyeZwoJtd1dOXxk:8frak9gorY6c8+xTzxVMoyeZDSbj0
- TLSH T135845A82B6D0CCB3D621463C4C95D329133ABEA05E864B072A647E3F7F377D16D5928A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Quakeganza.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Quakeganza.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target Quakeganza.exe
- Size 364KB
- SHA256 a6ddede60a43769cb19f4fb8de41160c769ae5a58d6e72de6126c3502ed9991e
- MD5 754a2aedcf67ea7a42033e1ec45240dd
- SHA1 04c00d8a8aedfcae241f5dcf1b5a2226dbe869d8
- SHA512 040d52c5b810e083f34aa15f3f97c498364856842b105878c4b83d324150501354f0137fdc5a0e7322dd1e691aaad270dd19ff793e8d58e2185f3ed9dbbdfb5a
- SSDEEP 3072:8GWCGPVHzzgd2HPVVf9AebuLFfK9s7IYNgDd9gGKI+LNTzxVMoyeZwoJtd1dOXxk:8frak9gorY6c8+xTzxVMoyeZDSbj0
- TLSH T135845A82B6D0CCB3D621463C4C95D329133ABEA05E864B072A647E3F7F377D16D5928A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Adds Run key to start application
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Pre-OS Boot
1Bootkit
1Scheduled Task/Job
1Scheduled Task
1