Overview
overview
5Static
static
�...̳.url
windows7-x64
1�...̳.url
windows10-2004-x64
1�...��.url
windows7-x64
1�...��.url
windows10-2004-x64
1�...se.exe
windows7-x64
5�...se.exe
windows10-2004-x64
5�...��.url
windows7-x64
1�...��.url
windows10-2004-x64
1�...��.url
windows7-x64
1�...��.url
windows10-2004-x64
1�...��.url
windows7-x64
1�...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
̳οˢǹ/QQ̳.url
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
̳οˢǹ/QQ̳.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
̳οˢǹ/֧.url
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
̳οˢǹ/֧.url
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
̳οˢǹ/ʹ/ˢǹ_se.exe
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
̳οˢǹ/ʹ/ˢǹ_se.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
̳οˢǹ/Ѷ.url
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
̳οˢǹ/Ѷ.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
̳οˢǹ/̳.url
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
̳οˢǹ/̳.url
Resource
win10v2004-20220901-en
Behavioral task
behavioral11
Sample
̳οˢǹ/Ӻѡ.url
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
̳οˢǹ/Ӻѡ.url
Resource
win10v2004-20221111-en
General
-
Target
9dcd1cd78750e006849f288fd74a09561e3810b47951e6141099278fe4dc5863
-
Size
1.5MB
-
MD5
02f5764879e37df4ef3a553162cd7af2
-
SHA1
deef67065afb6edc3f26f5bf85c7a90036f1b4b2
-
SHA256
9dcd1cd78750e006849f288fd74a09561e3810b47951e6141099278fe4dc5863
-
SHA512
8b24a11d463965e00c779ae4dc554380dbe8dd030a93f544311f8b1f351c46df22093950eea2a0c8b63fcd5c0bfaf2c3906a49130cdf807b003febd96bb3bad2
-
SSDEEP
24576:x/epKPKbii3+tLx3vQ4YiVLnSzMiX0ZS79Nq4odvtQa2lq2kbebVVoTYXqra8r7a:xmXOtLx3vQ4YZ0m8ZevRmacyfLDX
Malware Config
Signatures
Files
-
9dcd1cd78750e006849f288fd74a09561e3810b47951e6141099278fe4dc5863.zip
-
̳οˢǹ/QQ̳.url.url
-
̳οˢǹ/֧.url.url
-
̳οˢǹ/ʹ/ˢǹ.exe.se
-
̳οˢǹ/ʹ/ˢǹ_se.exe.exe windows x86
3c603a20f277ff3000d29f6529f391ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStrings
user32
SystemParametersInfoA
gdi32
GetTextMetricsA
winmm
midiStreamClose
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
inet_ntoa
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 572KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 988KB - Virtual size: 988KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
̳οˢǹ/Ѷ.url.url
-
̳οˢǹ/̳.url.url
-
̳οˢǹ/ͽ.txt
-
̳οˢǹ/Ӻѡ.url.url