Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows10-1703_x64
  • resource
    win10-20230915-en
  • resource tags

    arch:x64arch:x86image:win10-20230915-enlocale:en-usos:windows10-1703-x64system
  • submitted
    05/10/2023, 15:16

General

  • Target

    XQStudio微微.exe

  • Size

    1.4MB

  • MD5

    49f70b4052e4c21920a076f6d178e801

  • SHA1

    1267acfdfab6b0f9e4296eee3fc96b832f45aa16

  • SHA256

    e309a209f129ead3ea8671114b4eb5465c3e4b5cdbbf415694b4d078957f2f3f

  • SHA512

    255ea1c76c26dc771cf51d2c5c680d79a49a6380413691c1f7cfaa5a3a22ef115ddfe307951cdc316fc31d0378255394fd5727950962f83aa9270e6e29fdf98f

  • SSDEEP

    24576:JUaASvkxLBYtgAUSdlJ87hJJXdfhu2JxHPE:JUmYtaEhYql

Score
1/10

Malware Config

Signatures

  • Script User-Agent 1 IoCs

    Uses user-agent string associated with script host/environment.

Processes

  • C:\Users\Admin\AppData\Local\Temp\XQStudio微微.exe
    "C:\Users\Admin\AppData\Local\Temp\XQStudio微微.exe"
    1⤵
      PID:524

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/524-0-0x00000000024B0000-0x00000000024B1000-memory.dmp

      Filesize

      4KB

    • memory/524-2-0x00000000024B0000-0x00000000024B1000-memory.dmp

      Filesize

      4KB

    • memory/524-1-0x0000000000400000-0x0000000000574000-memory.dmp

      Filesize

      1.5MB

    • memory/524-3-0x0000000000400000-0x0000000000574000-memory.dmp

      Filesize

      1.5MB

    • memory/524-4-0x0000000000400000-0x0000000000574000-memory.dmp

      Filesize

      1.5MB

    • memory/524-6-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-5-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-8-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-10-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-12-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-14-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-16-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-18-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-20-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-22-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-24-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-26-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-28-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-30-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-32-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-34-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-36-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-38-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-40-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-42-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-44-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-46-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-47-0x0000000000400000-0x0000000000574000-memory.dmp

      Filesize

      1.5MB

    • memory/524-49-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-51-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-53-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-55-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-57-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-59-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-61-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-63-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB

    • memory/524-65-0x0000000007BE0000-0x0000000007CAE000-memory.dmp

      Filesize

      824KB