Overview

overview

7

Static

static

3

QPST_2.7.4...on.url

windows10-2004-x64

1

QPST_2.7.4...on.url

windows11-ltsc_2024-x64

1

QPST_2.7.4...er.url

windows10-2004-x64

1

QPST_2.7.4...er.url

windows11-ltsc_2024-x64

1

QPST_2.7.4...er.url

windows10-2004-x64

1

QPST_2.7.4...er.url

windows11-ltsc_2024-x64

1

QPST_2.7.4...se.url

windows10-2004-x64

1

QPST_2.7.4...se.url

windows11-ltsc_2024-x64

1

QPST_2.7.4...te.url

windows10-2004-x64

1

QPST_2.7.4...te.url

windows11-ltsc_2024-x64

1

QPST_2.7.4....1.exe

windows10-2004-x64

7

QPST_2.7.4....1.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    QPST_2.7.496.zip
  • Size 29.4MB
  • Sample260930-wthlnaef83
  • SHA256 b0eecb317851fbff1a450fe0ee18be1faf59bc7744ff0e4383ed4c3f6f86a977
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoverypersistenceransomware

Malware Config

Targets

    • Target
      QPST_2.7.496/Download Latest Version.url
    • Size 127B
    • SHA256 07c993ce3c9776d2ccf5796a396e45d6b9cb2d7a18c9e44c9b06535412ba2eae
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      QPST_2.7.496/Driver/Download Qualcomm Driver.url
    • Size 129B
    • SHA256 c8b008bb19223464bb166820b2d8f8a179936be37e1ce0ff6ce21240ed7c67dd
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      QPST_2.7.496/Driver/Download Qualcomm HS-USB QDLoader 9008 Driver.url
    • Size 131B
    • SHA256 90b70ca49429caf5af0ae468b306470d1b804addd59dbef2e9fc52cb5d45c66a
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      QPST_2.7.496/How to Use.url
    • Size 134B
    • SHA256 e6983c28aab8b91591dbae6ce5c8d5a5543480c099abf4e97a4d35e4ddf681b7
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      QPST_2.7.496/Official Website.url
    • Size 121B
    • SHA256 2b850055a0a2d2c4fa0606871ab3f15ac7f0cf69957f856fec7eec5767ff4493
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      QPST_2.7.496/QPST.2.7.496.1.exe
    • Size 32.2MB
    • SHA256 191b6784c9eb56b7269327348ca32a2e180411eb02f6c5e615e36cb43bcf4981
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoverypersistenceransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral11behavioral12

MITRE ATT&CK Enterprise v16

Tasks