Analysis

  • max time kernel
    47s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    27/11/2022, 16:35

General

  • Target

    СQQռ˵˵ɾ.exe

  • Size

    1.0MB

  • MD5

    3c3e60b22f1611f17251940481c12265

  • SHA1

    ba8ed68b182cb3081201ee7416f9aeb9c196ec42

  • SHA256

    0aa11edc04ca9e3e9a76efb171696d4e49ddb3ab367e9371fb36ed868bf32f71

  • SHA512

    d86440e320f29ec9448b450f2a5ded6f64c0d67acfa40ca38fc66c99239bb846db116d17d5ffd5e13d3018a9e2e92861c51e7733621e336dae8af18ba5c44374

  • SSDEEP

    12288:gBZJ2w31zsc8EsBj+vpiwu1acmR5nWFpPoSNZgxmsgbSiZ8eI9R:gBZ9zN8nBj+Ri91acdbXmx8a9j

Score
8/10
upx

Malware Config

Signatures

  • UPX packed file 24 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\СQQռ˵˵ɾ.exe
    "C:\Users\Admin\AppData\Local\Temp\СQQռ˵˵ɾ.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1416

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1416-54-0x0000000074DC1000-0x0000000074DC3000-memory.dmp

          Filesize

          8KB

        • memory/1416-55-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-59-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-67-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-75-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-77-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-79-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-81-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-73-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-89-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-97-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-95-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-93-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-91-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-87-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-85-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-83-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-71-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-69-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-65-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-63-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-61-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-56-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-57-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB

        • memory/1416-98-0x0000000010000000-0x000000001003E000-memory.dmp

          Filesize

          248KB