Analysis

  • max time kernel
    149s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    06/10/2023, 00:31

General

  • Target

    SecuriteInfo.com.Trojan.PWS.Qqpass.8831.19087.21785.exe

  • Size

    856KB

  • MD5

    a5eac40dab2ef18062553f0597687378

  • SHA1

    4cb06c2b6688b6cec842bae2feac260d472f8d26

  • SHA256

    0faecd83afff7e00f8ccbac7b90a6f2f08e98223c5a0294cb18381f407cef3b8

  • SHA512

    a58dfc98e7432f06496374011de4d2e01d1352f736e09d51a2e8face8a9f4bbe2fd35eafffb35ba25073e1dee7615f873139aa2462f3395ec2db2972534b4c24

  • SSDEEP

    12288:aUdqtpYuCiACx0K+ppFbUUaSaVTI7uR0+8t7D1cj09vF+fA0:ayq8diJx0DppFYUvaVT6op+Pq1A0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PWS.Qqpass.8831.19087.21785.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.PWS.Qqpass.8831.19087.21785.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads