Analysis
-
max time kernel
178s -
max time network
232s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
26-11-2022 18:20
General
-
Target
QQռӪ.exe
-
Size
1.1MB
-
MD5
0ff1edfd4166bda9c8e18d01883004c1
-
SHA1
340b52ccdd64fe3342b9db485abe8cc44c9c87b0
-
SHA256
7b8529cebcca7f3dfba8e8e2ee954f91567257cd08ac8d61916b19d4f2a3eabe
-
SHA512
f08e7191b94a36385e3d52538f7d54d00e5b72daea961a9673244ce1c9edb5596f41d8dc973354a9aec9f86e4e3f36b0748a22b2ab065f776a094ab6e8cdff39
-
SSDEEP
12288:m0oi+K5t1dF90uIdz2TlkgIess/zXgDnEcLxwKudV1zdV1udV11dV15LX:mdEtrF6ulkgIess/zJUxqBcD5j
Score
8/10
Malware Config
Signatures
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of SetWindowsHookEx 4 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\QQռӪ.exe"C:\Users\Admin\AppData\Local\Temp\QQռӪ.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\setup.exesetup.exe2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
-
Filesize
5.7MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
5.7MB
-
Filesize
2.3MB