| URL: | http://www.unifysmarttools.club/lp/fxmrkt/?fd=qbsc&x-context=wD7BM3P4TBGA24NMHILC1HFO&utm_source=wfxmrkt&utm_campaign=wfxmrkt&pxl=WFX3591_WFX3519_RUNT&utm_pubid=2009088&x-at=9b83ef8a-3a8b-42d7-b17a-f753d436b450&override=1 |
| Full analysis: | https://app.any.run/tasks/f1def896-51fa-407b-bc6e-ce6d431deafc |
| Verdict: | Malicious activity |
| Threats: | A loader is malicious software that infiltrates devices to deliver malicious payloads. This malware is capable of infecting victims’ computers, analyzing their system information, and installing other types of threats, such as trojans or stealers. Criminals usually deliver loaders through phishing emails and links by relying on social engineering to trick users into downloading and running their executables. Loaders employ advanced evasion and persistence tactics to avoid detection. |
| Analysis date: | May 24, 2019, 20:09:18 |
| OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
| Tags: | |
| Indicators: | |
| MD5: | 4FA9FBD811EC430869DD8CFFA203D820 |
| SHA1: | 06EF34EF6FE34BDC6BA5B42E54F313546FE2A700 |
| SHA256: | A061D533ABBB39FB1347A557C43BADA6B672D984B4DE6E71C2FB0C55DDCCD88B |
| SSDEEP: | 6:Cc4kIJ+dDdpbhUWDBWtRcmL6w0qzd66gYcVDyxkP1eRQaRU:l0+BD9Ucmh0g46gY5S1OQay |
MALICIOUS
Downloads executable files from the Internet
- firefox.exe (PID: 3576)
Application was dropped or rewritten from another process
- qbscsetup.exe (PID: 2160)
- qbscsetup.exe (PID: 2408)
- rtc.exe (PID: 2172)
- rtc.exe (PID: 2840)
- rtc.exe (PID: 2344)
Changes settings of System certificates
- explorer.exe (PID: 2044)
Loads dropped or rewritten executable
- rtc.exe (PID: 2840)
- WerFault.exe (PID: 1876)
Loads the Task Scheduler COM API
- rtc.exe (PID: 2840)
SUSPICIOUS
Creates files in the program directory
- firefox.exe (PID: 3576)
- WerFault.exe (PID: 1876)
Executable content was dropped or overwritten
- qbscsetup.exe (PID: 2160)
- firefox.exe (PID: 3576)
- qbscsetup.exe (PID: 2408)
- qbscsetup.tmp (PID: 2192)
Reads the Windows organization settings
- qbscsetup.tmp (PID: 2192)
Reads Windows owner or organization settings
- qbscsetup.tmp (PID: 2192)
Uses TASKKILL.EXE to kill process
- qbscsetup.tmp (PID: 2192)
Creates files in the user directory
- rtc.exe (PID: 2840)
INFO
Reads CPU info
- firefox.exe (PID: 3576)
Application launched itself
- firefox.exe (PID: 3576)
Reads settings of System Certificates
- explorer.exe (PID: 2044)
- firefox.exe (PID: 3576)
Application was dropped or rewritten from another process
- qbscsetup.tmp (PID: 1448)
- qbscsetup.tmp (PID: 2192)
Creates files in the user directory
- firefox.exe (PID: 3576)
Loads dropped or rewritten executable
- qbscsetup.tmp (PID: 2192)
Creates files in the program directory
- qbscsetup.tmp (PID: 2192)
Creates a software uninstall entry
- qbscsetup.tmp (PID: 2192)
Application was crashed
- rtc.exe (PID: 2172)
- rtc.exe (PID: 2344)
Dropped object may contain Bitcoin addresses
- firefox.exe (PID: 3576)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
Total processes
58
Monitored processes
15
Malicious processes
4
Suspicious processes
3
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 592 | "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3576.13.1516800435\1889131282" -childID 2 -isForBrowser -prefsHandle 2628 -prefMapHandle 2632 -prefsLen 216 -prefMapSize 180950 -schedulerPrefs 0001,2 -parentBuildID 20190225143501 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 3576 "\\.\pipe\gecko-crash-server-pipe.3576" 2644 tab | C:\Program Files\Mozilla Firefox\firefox.exe | firefox.exe | ||||||||||||
User: admin Company: Mozilla Corporation Integrity Level: LOW Description: Firefox Exit code: 0 Version: 65.0.2 Modules
| |||||||||||||||
| 944 | "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="3576.6.1685732788\2060005154" -childID 1 -isForBrowser -prefsHandle 1552 -prefMapHandle 1608 -prefsLen 1 -prefMapSize 180950 -schedulerPrefs 0001,2 -parentBuildID 20190225143501 -greomni "C:\Program Files\Mozilla Firefox\omni.ja" -appomni "C:\Program Files\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files\Mozilla Firefox\browser" - 3576 "\\.\pipe\gecko-crash-server-pipe.3576" 1592 tab | C:\Program Files\Mozilla Firefox\firefox.exe | firefox.exe | ||||||||||||
User: admin Company: Mozilla Corporation Integrity Level: LOW Description: Firefox Exit code: 0 Version: 65.0.2 Modules
| |||||||||||||||
| 1448 | "C:\Users\admin\AppData\Local\Temp\is-COHHG.tmp\qbscsetup.tmp" /SL5="$70294,6658849,170496,C:\Users\admin\Downloads\qbscsetup.exe" | C:\Users\admin\AppData\Local\Temp\is-COHHG.tmp\qbscsetup.tmp | — | qbscsetup.exe | |||||||||||
User: admin Integrity Level: MEDIUM Description: Setup/Uninstall Exit code: 0 Version: 51.1052.0.0 Modules
| |||||||||||||||
| 1876 | C:\Windows\system32\WerFault.exe -u -p 2172 -s 88 | C:\Windows\system32\WerFault.exe | svchost.exe | ||||||||||||
User: admin Company: Microsoft Corporation Integrity Level: HIGH Description: Windows Problem Reporting Exit code: 0 Version: 6.1.7600.16385 (win7_rtm.090713-1255) Modules
| |||||||||||||||
| 2044 | C:\Windows\Explorer.EXE | C:\Windows\explorer.exe | — | ||||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Explorer Exit code: 0 Version: 6.1.7600.16385 (win7_rtm.090713-1255) Modules
| |||||||||||||||
| 2160 | "C:\Users\admin\Downloads\qbscsetup.exe" | C:\Users\admin\Downloads\qbscsetup.exe | explorer.exe | ||||||||||||
User: admin Company: Integrity Level: MEDIUM Description: Qbit~System~ Care Setup Exit code: 0 Version: 1.0.0.51 Modules
| |||||||||||||||
| 2172 | "C:\Program Files\Qbit~System~ Care for USER-PC\rtc.exe" firstshow | C:\Program Files\Qbit~System~ Care for USER-PC\rtc.exe | qbscsetup.tmp | ||||||||||||
User: admin Integrity Level: HIGH Description: System Cleaning Tool Exit code: 3228369022 Version: 1.0.0.51 Modules
| |||||||||||||||
| 2192 | "C:\Users\admin\AppData\Local\Temp\is-HBR2V.tmp\qbscsetup.tmp" /SL5="$60212,6658849,170496,C:\Users\admin\Downloads\qbscsetup.exe" /SPAWNWND=$30188 /NOTIFYWND=$70294 | C:\Users\admin\AppData\Local\Temp\is-HBR2V.tmp\qbscsetup.tmp | qbscsetup.exe | ||||||||||||
User: admin Integrity Level: HIGH Description: Setup/Uninstall Exit code: 0 Version: 51.1052.0.0 Modules
| |||||||||||||||
| 2344 | "C:\Program Files\Qbit~System~ Care for USER-PC\rtc.exe" | C:\Program Files\Qbit~System~ Care for USER-PC\rtc.exe | explorer.exe | ||||||||||||
User: admin Integrity Level: MEDIUM Description: System Cleaning Tool Exit code: 3228369022 Version: 1.0.0.51 Modules
| |||||||||||||||
| 2408 | "C:\Users\admin\Downloads\qbscsetup.exe" /SPAWNWND=$30188 /NOTIFYWND=$70294 | C:\Users\admin\Downloads\qbscsetup.exe | qbscsetup.tmp | ||||||||||||
User: admin Company: Integrity Level: HIGH Description: Qbit~System~ Care Setup Exit code: 0 Version: 1.0.0.51 Modules
| |||||||||||||||
Total events
7 809
Read events
7 423
Write events
374
Delete events
12
Modification events
| (PID) Process: | (2044) explorer.exe | Key: | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count |
| Operation: | write | Name: | 308046O0NS4N39PO |
Value: 000000000100000002000000771B0000000080BF000080BF000080BF000080BF000080BF000080BF000080BF000080BF000080BF000080BFFFFFFFFF209897E1ACE1D40100000000 | |||
| (PID) Process: | (2044) explorer.exe | Key: | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{CEBFF5CD-ACE2-4F4F-9178-9926F41749EA}\Count |
| Operation: | write | Name: | HRZR_PGYFRFFVBA |
Value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| |||
| (PID) Process: | (3576) firefox.exe | Key: | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings |
| Operation: | write | Name: | ProxyEnable |
Value: 0 | |||
| (PID) Process: | (3576) firefox.exe | Key: | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections |
| Operation: | write | Name: | SavedLegacySettings |
Value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| |||
| (PID) Process: | (3576) firefox.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\MuiCache\62\52C64B7E |
| Operation: | write | Name: | LanguageList |
Value: en-US | |||
| (PID) Process: | (3576) firefox.exe | Key: | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap |
| Operation: | write | Name: | UNCAsIntranet |
Value: 0 | |||
| (PID) Process: | (3576) firefox.exe | Key: | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap |
| Operation: | write | Name: | AutoDetect |
Value: 1 | |||
| (PID) Process: | (2044) explorer.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\BagMRU |
| Operation: | write | Name: | NodeSlots |
Value: 0202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202 | |||
| (PID) Process: | (2044) explorer.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\BagMRU |
| Operation: | write | Name: | MRUListEx |
Value: 0100000000000000070000000200000006000000030000000500000004000000FFFFFFFF | |||
| (PID) Process: | (2044) explorer.exe | Key: | HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0 |
| Operation: | write | Name: | MRUListEx |
Value: 0000000002000000010000000400000003000000FFFFFFFF | |||
Executable files
23
Suspicious files
84
Text files
70
Unknown types
69
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 3576 | firefox.exe | C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-current.bin | — | |
MD5:— | SHA256:— | |||
| 3576 | firefox.exe | C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\trash7383 | — | |
MD5:— | SHA256:— | |||
| 3576 | firefox.exe | C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs-1.js | — | |
MD5:— | SHA256:— | |||
| 3576 | firefox.exe | C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\sessionCheckpoints.json.tmp | — | |
MD5:— | SHA256:— | |||
| 3576 | firefox.exe | C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\scriptCache-child-current.bin | binary | |
MD5:— | SHA256:— | |||
| 3576 | firefox.exe | C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\startupCache\urlCache-current.bin | binary | |
MD5:— | SHA256:— | |||
| 3576 | firefox.exe | C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\qldyz51w.default\prefs.js | text | |
MD5:— | SHA256:— | |||
| 3576 | firefox.exe | C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\55C955B105C41025CCE91B2286CC239DF2F5BEEF | der | |
MD5:— | SHA256:— | |||
| 3576 | firefox.exe | C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\safebrowsing-updating\base-track-digest256.sbstore | binary | |
MD5:— | SHA256:— | |||
| 3576 | firefox.exe | C:\Users\admin\AppData\Local\Mozilla\Firefox\Profiles\qldyz51w.default\cache2\entries\56A0B4E017F1172A15BEA3EBE9C2D0D1399BE0D1 | der | |
MD5:— | SHA256:— | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
31
TCP/UDP connections
46
DNS requests
88
Threats
4
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
3576 | firefox.exe | GET | 200 | 63.143.44.100:80 | http://www.unifysmarttools.club/lp/lp/lp26/lp26.js | US | text | 1.13 Kb | suspicious |
3576 | firefox.exe | GET | 200 | 63.143.44.100:80 | http://www.unifysmarttools.club/lp/fxmrkt/?fd=qbsc&x-context=wD7BM3P4TBGA24NMHILC1HFO&utm_source=wfxmrkt&utm_campaign=wfxmrkt&pxl=WFX3591_WFX3519_RUNT&utm_pubid=2009088&x-at=9b83ef8a-3a8b-42d7-b17a-f753d436b450&override=1 | US | html | 15.4 Kb | suspicious |
3576 | firefox.exe | POST | 200 | 93.184.220.29:80 | http://ocsp.digicert.com/ | US | der | 471 b | whitelisted |
3576 | firefox.exe | POST | 200 | 93.184.220.29:80 | http://ocsp.digicert.com/ | US | der | 471 b | whitelisted |
3576 | firefox.exe | GET | 200 | 63.143.44.100:80 | http://www.unifysmarttools.club/lp/indicator/indicator.js | US | text | 1.02 Kb | suspicious |
3576 | firefox.exe | GET | 200 | 63.143.44.100:80 | http://www.unifysmarttools.club/lp/js/custom.js | US | text | 1.41 Kb | suspicious |
3576 | firefox.exe | POST | 200 | 216.58.206.3:80 | http://ocsp.pki.goog/GTSGIAG3 | US | der | 471 b | whitelisted |
3576 | firefox.exe | GET | 200 | 63.143.44.100:80 | http://www.unifysmarttools.club/lp/lang/indicator/en.json | US | text | 1.77 Kb | suspicious |
3576 | firefox.exe | POST | 200 | 63.143.44.100:80 | http://www.unifysmarttools.club/lp/ajax/Default.aspx/TrackLpView | US | text | 20 b | suspicious |
3576 | firefox.exe | POST | — | 63.143.44.100:80 | http://www.unifysmarttools.club/lp/ajax/Default.aspx/CreateIPFile | US | — | — | suspicious |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
3576 | firefox.exe | 52.43.79.30:443 | aus5.mozilla.org | Amazon.com, Inc. | US | unknown |
3576 | firefox.exe | 63.143.44.100:80 | www.unifysmarttools.club | Limestone Networks, Inc. | US | suspicious |
3576 | firefox.exe | 52.27.173.161:443 | search.services.mozilla.com | Amazon.com, Inc. | US | unknown |
3576 | firefox.exe | 2.16.106.209:80 | detectportal.firefox.com | Akamai International B.V. | — | whitelisted |
3576 | firefox.exe | 93.184.220.29:80 | ocsp.digicert.com | MCI Communications Services, Inc. d/b/a Verizon Business | US | whitelisted |
3576 | firefox.exe | 52.85.184.36:443 | snippets.cdn.mozilla.net | Amazon.com, Inc. | US | unknown |
3576 | firefox.exe | 216.58.207.74:443 | fonts.googleapis.com | Google Inc. | US | whitelisted |
3576 | firefox.exe | 151.139.128.14:80 | ocsp.comodoca.com | Highwinds Network Group, Inc. | US | suspicious |
3576 | firefox.exe | 172.217.21.234:443 | safebrowsing.googleapis.com | Google Inc. | US | whitelisted |
3576 | firefox.exe | 172.217.16.174:80 | www.google-analytics.com | Google Inc. | US | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
www.unifysmarttools.club |
| suspicious |
detectportal.firefox.com |
| whitelisted |
aus5.mozilla.org |
| whitelisted |
balrog-aus5.r53-2.services.mozilla.com |
| whitelisted |
unifysmarttools.club |
| suspicious |
a1089.dscd.akamai.net |
| whitelisted |
search.services.mozilla.com |
| whitelisted |
search.r53-2.services.mozilla.com |
| whitelisted |
ocsp.digicert.com |
| whitelisted |
cs9.wac.phicdn.net |
| whitelisted |
Threats
PID | Process | Class | Message |
|---|---|---|---|
3576 | firefox.exe | Potentially Bad Traffic | ET POLICY Executable served from Amazon S3 |
3576 | firefox.exe | Potential Corporate Privacy Violation | ET POLICY PE EXE or DLL Windows file download HTTP |
3576 | firefox.exe | Misc activity | ET INFO EXE - Served Attached HTTP |
1876 | WerFault.exe | Potential Corporate Privacy Violation | ET POLICY Application Crash Report Sent to Microsoft |
Process | Message |
|---|---|
rtc.exe | Native library pre-loader is trying to load native SQLite library "C:\Program Files\Qbit~System~ Care for USER-PC\x86\SQLite.Interop.dll"...
|
rtc.exe | Native library pre-loader failed to get setting "No_PreLoadSQLite" value: System.Xml.XmlException: Root element is missing.
at System.Xml.XmlTextReaderImpl.Throw(Exception e)
at System.Xml.XmlTextReaderImpl.ThrowWithoutLineInfo(String res)
at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
at System.Xml.XmlTextReaderImpl.Read()
at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
at System.Xml.XmlDocument.Load(XmlReader reader)
at System.Xml.XmlDocument.Load(String filename)
at System.Data.SQLite.UnsafeNativeMethods.GetSettingValue(String name, String default)
|
rtc.exe | Native library pre-loader failed to get setting "PreLoadSQLite_NoSearchForDirectory" value: System.Xml.XmlException: Root element is missing.
at System.Xml.XmlTextReaderImpl.Throw(Exception e)
at System.Xml.XmlTextReaderImpl.ThrowWithoutLineInfo(String res)
at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
at System.Xml.XmlTextReaderImpl.Read()
at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
at System.Xml.XmlDocument.Load(XmlReader reader)
at System.Xml.XmlDocument.Load(String filename)
at System.Data.SQLite.UnsafeNativeMethods.GetSettingValue(String name, String default)
|
rtc.exe | Native library pre-loader failed to get setting "PreLoadSQLite_ProcessorArchitecture" value: System.Xml.XmlException: Root element is missing.
at System.Xml.XmlTextReaderImpl.Throw(Exception e)
at System.Xml.XmlTextReaderImpl.ThrowWithoutLineInfo(String res)
at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
at System.Xml.XmlTextReaderImpl.Read()
at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
at System.Xml.XmlDocument.Load(XmlReader reader)
at System.Xml.XmlDocument.Load(String filename)
at System.Data.SQLite.UnsafeNativeMethods.GetSettingValue(String name, String default)
|
rtc.exe | Native library pre-loader failed to get setting "PreLoadSQLite_ProcessorArchitecture" value: System.Xml.XmlException: Root element is missing.
at System.Xml.XmlTextReaderImpl.Throw(Exception e)
at System.Xml.XmlTextReaderImpl.ThrowWithoutLineInfo(String res)
at System.Xml.XmlTextReaderImpl.ParseDocumentContent()
at System.Xml.XmlTextReaderImpl.Read()
at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)
at System.Xml.XmlDocument.Load(XmlReader reader)
at System.Xml.XmlDocument.Load(String filename)
at System.Data.SQLite.UnsafeNativeMethods.GetSettingValue(String name, String default)
|