General

  • Target

    7bbe49a141632312275a0b48cff727ab6f03c9700f04a321ae768c10b05b1b89

  • Size

    3.1MB

  • MD5

    bcd5598dc46fc032e42c8480423c9021

  • SHA1

    7d578e13344e6be62ed4e20c78363a657bbd158f

  • SHA256

    7bbe49a141632312275a0b48cff727ab6f03c9700f04a321ae768c10b05b1b89

  • SHA512

    079aa70ed1fb9c454f3a488bbe15b1a7a611a14d2c162a9bab091c7534e897238748d590a99cd2cb10b490b1e66a03d0cfbedc54eb946b0e053d6c8bcf18f33c

  • SSDEEP

    49152:0cDHG5X9lJQF4ViWRpURkHILUoFWluO1Kblpe4dVW/c1g/xTVEi7gPkVu:0cDy3SF8iWQmIF9O1aGN0kxsPWu

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7bbe49a141632312275a0b48cff727ab6f03c9700f04a321ae768c10b05b1b89
    .zip
  • qrcp.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • 卸载清理.cmd
    .cmd .vbs
  • 设置右键菜单.cmd
    .cmd .vbs
  • 配置网络.cmd