General

  • Target

    80a1fd1ece493f72a864f3e60d1ea43e503b27a11a9d18234ec398337c574aaa

  • Size

    2.3MB

  • Sample

    221127-ggzl3sdc83

  • MD5

    856691f4d705fb3594b99a8d25403ae0

  • SHA1

    6ef3bdd726b281ded6ad2606452426c70d93cbd7

  • SHA256

    80a1fd1ece493f72a864f3e60d1ea43e503b27a11a9d18234ec398337c574aaa

  • SHA512

    f003a9e706e168037f172d5642cfb443c33b46786090096bd655f273cef2da37f59b36090189abad853b4ffc7d2fd08f06ae6aa6eb6127aae4d020eb043ca599

  • SSDEEP

    49152:UQpM88a7aNJsMb1xj6xp0mZ9gIXBHjMMTuRLjbgoFHOOks60838:xM8L7aNHBxuxWUBHjOX58p4

Score
9/10
upx

Malware Config

Targets

    • Target

      QQռ˵˵ɾ/EThread.fne

    • Size

      60KB

    • MD5

      41ff14216ad567a3855d9c18d0f72a5b

    • SHA1

      02fcc48754fa98e38010ae7b978d53f6376f9d56

    • SHA256

      3709c96ce81d57ca7a5ffc3c4d830aa3f224b02b84446058520c5d45ccd845cc

    • SHA512

      bd7bb2db0153898d002458ec6a177c75e45f2d21c7134a07bb25de66b00a23d61e92e0fdad312f414960b9a5180e7b157e304c750ab5e182d25285f4b79e6ffe

    • SSDEEP

      768:9NOcug/0M1vru9jVm/hrLdafM77Ofqr5BeT8+wVoh9xJT6Fq4oq+H8c7e:j5/bvrGIJrxf7rOolqh9xQboNcc7

    Score
    1/10
    • Target

      QQռ˵˵ɾ/HtmlView.fne

    • Size

      224KB

    • MD5

      35fea3d93bf2e9802ef4b32c0b613cb8

    • SHA1

      eedfd2fc89dd5c1aac0bb0d45ab27f62f9ffd5de

    • SHA256

      3062aa44c945cf1d9f4e62a1025f920348a162209db1cad29f36309e5e33bf7b

    • SHA512

      4ed04284c20dbc65d0020f9c1898252ad445ac676fcb3a105ab58df479893c50204b1fe0aac62c585ae0a3ef936ab247153c51c2fe49cf6ebe199fdfebcd7d5f

    • SSDEEP

      3072:l4Nnc7gp8yvLUzPj+QjxdgTbXXzqc1R67AQ5lXpgoPNr3L4v0IrH9:l4NcsTLUzlxefXDzGA0XtMv

    Score
    1/10
    • Target

      QQռ˵˵ɾ/QQռ˵˵ɾ.exe

    • Size

      1.4MB

    • MD5

      8074fb0b99e23f266a0407d83f4a1876

    • SHA1

      cf218bccc2d25ed6d4cf31d0d9966d05321e7c1b

    • SHA256

      26aea82c5fd414d78149b8489f178573909a6ab611d335c0a08c0a307b9093ba

    • SHA512

      78db85c0667891bb691b30d493ab023bc25a36c6b5598a84b1c0acbd1437b8659edfb2e8c4d8df0c428f1f79242edc58a85d10fa7e3f85a83ce157ccf58e0cf3

    • SSDEEP

      24576:hy7UKHM9UilNE9DnKVV4JUhf0ggTTiP8TpXzYt9+eSejL6aYsjjp880wCeHe+MUF:1W1oVxx0gPj5e6Q0BCpVJJJJDE

    Score
    1/10
    • Target

      QQռ˵˵ɾ/SkinH_EL.dll

    • Size

      86KB

    • MD5

      147127382e001f495d1842ee7a9e7912

    • SHA1

      92d1ed56032183c75d4b57d7ce30b1c4ae11dc9b

    • SHA256

      edf679c02ea2e170e67ab20dfc18558e2bfb4ee5d59eceeaea4b1ad1a626c3cc

    • SHA512

      97f5ae90a1bbacfe39b9e0f2954c24f9896cc9dca9d14364c438862996f3bbc04a4aa515742fccb3679d222c1302f5bb40c7eaddd6b5859d2d6ef79490243a4d

    • SSDEEP

      1536:s5Np2dgZgIehUUS3E1Ujmrvl179D53UWnGQRJZiXRmrCnKptnouy8K:s5Np2dlUX0+Cx17F8QRJZKmOK3outK

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      QQռ˵˵ɾ/dp1.fne

    • Size

      128KB

    • MD5

      f9e1cbaaf889f0a440d43f1efc42a310

    • SHA1

      07927506f5dff52509ad431aeb27b25fe06bdc0c

    • SHA256

      9ade37d9bfe5cd302ac440e9c68f9f67408263237287ffb6b56ca796ac1cb9ce

    • SHA512

      7ede805de6fa057bd74fc6711c56bfa5bca2f6a89185a90732fa10072d403b099ec15a3cb1ce8a6227cd6c3a9ba3165e3708f5e67443478fd593bec6fcc652f8

    • SSDEEP

      3072:reaEHUzyzneUPCi4Nfef0EnYw7EG3oR5NO:rXazeUPCicefJnYw4JNO

    Score
    3/10
    • Target

      QQռ˵˵ɾ/eAPI.fne

    • Size

      320KB

    • MD5

      ae4a6846b6864648fe6f080acec0372b

    • SHA1

      084f461392d7c2b35999b7a0b18c8637801822f2

    • SHA256

      f7ccae2a83ae48e3a4d84a77482258b19bae3043b28fbb3cfc02ca93692c4eca

    • SHA512

      7169e30a16444e13af8aae26e18a654747885c9913c1073b0686994c684ce46539f7204665c480933602b5b5941a768706ca69d5e6fe0e758b10faa878e473db

    • SSDEEP

      6144:/hP8pv4q6LwUaZHfBEObei7fGuuESrhvpK1SNqrJdA4WVIzaLX3fv0DYV:4zUaHJZKrhvpK1S8Mv2OuY

    Score
    1/10
    • Target

      QQռ˵˵ɾ/iext.fnr

    • Size

      216KB

    • MD5

      0eb35ab5936d0ade7eb3e6ebdefc78e5

    • SHA1

      a0f369f09f4ebeef78fce0efeb10ac24b1c3aa27

    • SHA256

      5035b54ba210173e82004291090b59c0630d17c45eadb48e9744f94303a2b891

    • SHA512

      1d51e36a847a1b2a6ea0cc8e1b988386401c2b033344b5571fecb83a8da62848f61176a13fbd13c976aded4f915daa8fc7517fd5b08e6a35e4d0c53d05317176

    • SSDEEP

      3072:hfHFz60KNUP7j4f/FW3gMTnkCnnvZsfwoKUjJRjqH9Z/oUHhXMG5Ra7l:hfHYbS4VJMTntnvZsIijJpqndXMG

    Score
    1/10
    • Target

      QQռ˵˵ɾ/internet.fne

    • Size

      188KB

    • MD5

      30ed482f82e5dd22889f1793fb059373

    • SHA1

      171f79e8300c2d0a73bf64dd39743a218540eee2

    • SHA256

      eeddb86a003915ea33b90e7eb533c5a58875b1669bf7e279d116391bc9a34391

    • SHA512

      3dc2faa0cf9f3ed5b8ce81445d245628f660600f02cebfcc5ad4843235664a9102071e3d64bb21a3667ce300bba67d7ed499bab1254376e9b9415f39a7ed3f0a

    • SSDEEP

      3072:+JQn9C8I+od+guN9P1nqp4JM55txdN8mW0UYsCV7IPThpEbbAKNXoql3VJbr0Zy9:+I9HI+od+ge1nqpbjLdN8mnVso7AThpE

    Score
    1/10
    • Target

      QQռ˵˵ɾ/krnln.fnr

    • Size

      1.0MB

    • MD5

      74c79231960067787b2acbdf5a851ed7

    • SHA1

      619c5536fdb6a22c0164237374edb016ab2bed2e

    • SHA256

      3585a5d1a84d1f8212009b80b26aff3b7d0643f35626324af38c3d72443c66c4

    • SHA512

      dcf8cc1730a3f2fa65ecfbf6626e63b772e95f708c582372acc3abb61dad578070c109a4b48b441a3094c326fd35e4527751909210d509ff3f9b4ce7e533d259

    • SSDEEP

      12288:/5FuSWj2rWwLL8GdK7euRJ9w8+xoskvH4YseOFesIzePFUUgIb4vx:/W1FcZdK78y4qzePFUX

    Score
    1/10
    • Target

      QQռ˵˵ɾ/shell.fne

    • Size

      64KB

    • MD5

      44ee66138d09fd2c76f94d5d97494a14

    • SHA1

      137b2a5c0e74325c068ff6a72ba4c6bdda60699b

    • SHA256

      af958b388b80cfe097670b2a80cabec35ec791c8fc8a071d59ef38a898be33c8

    • SHA512

      80e226886f111f3112912272208053fec730dcb6f5845814382c5ce66512eab7a289d9eddcd5fc62ad28153607319f3ccd44c1a5c62b6ac0cc584f961edcb3e4

    • SSDEEP

      768:KKL/p1eGx6a+0XTLOa9c/mBAmVrOwDrxwVgmFj9onq7K7hAI:Kq/pQW6a+CnXamRVSwPxO17oq+mI

    Score
    1/10
    • Target

      QQռ˵˵ɾ/shellEx.fne

    • Size

      15KB

    • MD5

      b7e1723830b9ada6d82aee8adbb65e02

    • SHA1

      6d0fb1602f82a58e26ccfcc3ce9c1f483fd23b8d

    • SHA256

      62415bf977b184c5b9db0659312d8d52a7521a68656e2a9442b5bcf9fa6b9194

    • SHA512

      6ad9716359b9f24bd773985131b30572e7e8eec53b9913299b6780f2528b741f2ec372e966777cc70464204b59a50c8ceb2ad6ed399d373a08a8a1f187c4d02c

    • SSDEEP

      192:gBs2jSYI4UdRBQF84R4ojAFUFyQtpgbKLBKiUJvKvrYxMOksA57S6F:qSyqPQFb+YBgbKLBKiUJvCrojk1F

    Score
    1/10
    • Target

      QQռ˵˵ɾ/spec.fne

    • Size

      88KB

    • MD5

      84f73873ae5fa41a274bbe3333e705b3

    • SHA1

      19767762255d8c9a1ecc42c662dd33b0ffc11f66

    • SHA256

      5e44416130dc9c94522cbdf213742b6c66fef9a20c5276719f2f8a6333635c6b

    • SHA512

      4aa270284935e15a69ebf7ada9e6653f2fcf0ade93383ced6de2c8cfe0140a20b242311a5f591fe2766a811b2cff6c568a34010ad599bede9c0ed034ee7d1a1a

    • SSDEEP

      1536:3ohsQOBxOWxKT2HZaum0JPx5tAYz0Jfob2v9oIGRf:3ohip0TIsuXtGJfob

    Score
    1/10
    • Target

      QQռ˵˵ɾ/Ӫվ.url

    • Size

      260B

    • MD5

      998e40a7f99a6d2b5e7afc5ca3380eec

    • SHA1

      37eea8e1c1261a9b8bacbd594ff35ffb0f2d6b22

    • SHA256

      c9e57d34d8668b2f1255428e07a7a503cb17efb434e1fdd4397c052e973b117f

    • SHA512

      444bb3c72ed2b5214ec01ed5cffd1de4bfed3f3ad27d9519cce81907ea741a3d22fb83b8b3a89697ed1df91a117446f1c2c6a4ec0a64691d857d5239f1c802d9

    Score
    1/10
    • Target

      QQռ˵˵ɾ/net2.0.url

    • Size

      262B

    • MD5

      3ef0acb3e0584d7ba991cfd30b56155f

    • SHA1

      df3b5a2ec83bc6f321f05d95ffe82948d7419971

    • SHA256

      6cd753ba7acc0508787e5adea4873201b93a2f3dae8f0ab2e8bbf0b37aad4f0f

    • SHA512

      85919dbf3ad1da1d4c17b255168b4252ec3e4e7a2bad54a2fd7b0fd893a34a6b95133014ebbd2381d3a1d7f37180d73bfe4b68a79ec2e2a3528cebdc988cff54

    Score
    1/10

MITRE ATT&CK Matrix

Tasks