Analysis
-
max time kernel
134s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 03:53
Static task
static1
Behavioral task
behavioral1
Sample
ٷվ.url
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ٷվ.url
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
ڼQQܼϵиԶupdate.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
ڼQQܼϵиԶupdate.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
ڼQQռ˵˵ˢѻˢv6.3.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
ڼQQռ˵˵ˢѻˢv6.3.exe
Resource
win10v2004-20221111-en
General
-
Target
ڼQQܼϵиԶupdate.exe
-
Size
740KB
-
MD5
0d70e4829a8a03007ce46351cc695a11
-
SHA1
e8bc045cdb81bb368aca0510804ca07a158f942c
-
SHA256
280735afc354bc8b995b815c7a0a99773360a44be532379972dd944e0f80afc8
-
SHA512
8839875673b497b4f8746686b78de77b8614d86297d0508ec30bf0a0a5383f604d69223755755a687436acfd731c8bf30f855995226fec46007494a83579b4d0
-
SSDEEP
12288:Zx5lsGRDzfa03lc9G6dHSJnxJcQ1LlvT7ps1sI:ZnRHft3lc9+JL1e1sI
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1584 ڼQQܼϵиԶupdate.exe 1584 ڼQQܼϵиԶupdate.exe 1584 ڼQQܼϵиԶupdate.exe 1584 ڼQQܼϵиԶupdate.exe