Overview

overview

10

Static

static

10

5191cf625d...cb.exe

windows10-2004-x64

10

5191cf625d...cb.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    5191cf625dfc209a347f137b50aea199e82040fd5ee9086fb3e2de73c133f3cb
  • Size 14.8MB
  • Sample261002-q185asbd42
  • SHA256 5191cf625dfc209a347f137b50aea199e82040fd5ee9086fb3e2de73c133f3cb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
closedquorumbackdoorstealer

Malware Config

Targets

    • Target
      5191cf625dfc209a347f137b50aea199e82040fd5ee9086fb3e2de73c133f3cb
    • Size 14.8MB
    • SHA256 5191cf625dfc209a347f137b50aea199e82040fd5ee9086fb3e2de73c133f3cb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdoorclosedquorumstealer

    • Detects ClosedQuorum backdoor

    • Family: ClosedQuorum

      ClosedQuorum is a Windows backdoor and stealer that lets multiple LLMs vote on its actions written in Golang.

      backdoorstealerclosedquorum
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks