Analysis
-
max time kernel
91s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
26-11-2022 15:57
General
-
Target
QQ空间访客提取器(超级版V2.0).exe
-
Size
1.3MB
-
MD5
5e170ca63a9476fa85d66ba7a6931f7f
-
SHA1
4c73c04f124ea22356452adebb136e6dc34e43a4
-
SHA256
4f3fbdaaaee94e54e20e907ef0597469d2a7cafb525a72fe7a7a5a8e21132bfc
-
SHA512
67c978091b575acb33aade31ee611c996eb899022929cd06c386bf55584b6569e05209a8f672479f1ca544508d2c8b13931880cee48f45f92dfc2526dac6dda6
-
SSDEEP
24576:Wtf4pLAW6XVnfOrA7CcrdPNUOwPsDP8XdfWtag+E/ditt9Hzl:kfgLAfh3vnkWt7xUtrT
Score
8/10
Malware Config
Signatures
-
VMProtect packed file 6 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\QQ空间访客提取器(超级版V2.0).exe"C:\Users\Admin\AppData\Local\Temp\QQ空间访客提取器(超级版V2.0).exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.8MB
-
Filesize
5.8MB
-
Filesize
5.8MB
-
Filesize
5.8MB
-
Filesize
5.8MB
-
Filesize
5.8MB