Analysis
-
max time kernel
133s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
23-11-2022 19:27
General
-
Target
恒有QQ申请器（永久免费）/QQ/IP.exe
-
Size
436KB
-
MD5
fa76d79ecfe26cdf6f1b4ce66cebd88a
-
SHA1
aa93e0b35aca34cabea0a64dba4f9e5e9d016451
-
SHA256
594b7fb4b862693cfa192cf1eb54118f0b571841d5380702dc22daf9d0a10537
-
SHA512
0d8d5d1834be3dcb997c52046c800ff67c14fe9888db15786fef0cbc6410cb16f8d7489106834c0fdc94e2eb26805d27be07759346496dbf59f163065c9c1e42
-
SSDEEP
12288:5xVU5TjPAzjAbTwrD4x7bO6XBJvqPhQj81tFb:KJPMMbTwr8B1rvqX1jb
Score
8/10
Malware Config
Signatures
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\恒有QQ申请器（永久免费）\QQ\IP.exe"C:\Users\Admin\AppData\Local\Temp\恒有QQ申请器（永久免费）\QQ\IP.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
860KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
860KB
-
Filesize
248KB