Analysis

  • max time kernel
    92s
  • max time network
    163s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-11-2022 09:59

General

  • Target

    QQ邮箱群发王1.0/UUWiseHelper.dll

  • Size

    275KB

  • MD5

    0acd9b058b3232b5c91242e24c39ac9c

  • SHA1

    42871e8b89e6425f7872e1cf8fac3e337f021ebb

  • SHA256

    1b3017c2998dad80a86cc759d8f63341a196d281591cbc2ea4d426426bf32ce0

  • SHA512

    92ae4079bafb58a5e5beef30f0155c06bf38eaa5022eafdee46ba7967df153d5d534a915a2d1be6c1ab6b58b8ca90ecc7f24f4ef4fbbb6ca226f552b03942a6c

  • SSDEEP

    6144:wR5HZVMrXa07zts3Xf7mNod1NwCTCXETH:M5Vi17ztimNo5wwCs

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\QQ邮箱群发王1.0\UUWiseHelper.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1428
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\QQ邮箱群发王1.0\UUWiseHelper.dll,#1
      2⤵
        PID:1552

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1552-132-0x0000000000000000-mapping.dmp