Behavioral task
behavioral1
Sample
qtpindaomoniqi/JZ5Uɫվ.url
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
qtpindaomoniqi/JZ5Uɫվ.url
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
qtpindaomoniqi/qtƵv1.0.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
qtpindaomoniqi/qtƵv1.0.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
qtpindaomoniqi/ʹñض.url
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
qtpindaomoniqi/ʹñض.url
Resource
win10v2004-20220901-en
General
-
Target
3a9a6b9dce64599aada8af8d84794e16b55208a6c41cf417511b5443033c8b16
-
Size
346KB
-
MD5
9b962efb10b9cadb4afd7b87de301628
-
SHA1
c3286d09dedaf7ad86b0da0d155b2ae78ed5f750
-
SHA256
3a9a6b9dce64599aada8af8d84794e16b55208a6c41cf417511b5443033c8b16
-
SHA512
4ace3fe0d3ceb134b14d62da3f4a5ecc371574598c9643fc51cc0fe0ac63835c1a4840236dcf422b87f941ad9681b9569d740fd7cfa4ec4ee681aec1f5f0b32e
-
SSDEEP
6144:eAYCYJ5leFYs1fpEOX34IKfXjK5c8HBgmBLCWh1fBIwPdAlS3jGlR9qNqgt8bbgO:eAYLBeFv1fpN4I8X+jBRLCWHfBhaUj+J
Malware Config
Signatures
-
Processes:
resource yara_rule static1/unpack001/qtpindaomoniqi/qtƵv1.0.exe upx
Files
-
3a9a6b9dce64599aada8af8d84794e16b55208a6c41cf417511b5443033c8b16.zip
-
qtpindaomoniqi/JZ5Uɫվ.url.url
-
qtpindaomoniqi/qtƵv1.0.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 912KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 336KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
qtpindaomoniqi/ʹñض.url.url
-
qtpindaomoniqi/ʹ˵.txt