e0bd8b384c6fa491f59f367397ce90d7ce4bdd1ca5e63d65b7c920592c2e2d11

Analysis

max time kernel
1s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 10:36

Target

qqbm/QQbm.exe
Size

1.9MB
MD5

b1974e7c8750f5ddface0c974b97635f
SHA1

37566ef85e92e116308b5f2fa17708c93a200958
SHA256

9f5e528bdab12af6041511b017e08df7c6bf142901e63d5d7b89024eeac8e6c5
SHA512

90d87d954404459a4fc710a89fef48fa014b293d94a50c93aed1db7d724fad52a2b8c6d500dc4d0e1384f2697426573c885059bf6afb668660b87f2e43d92bb8
SSDEEP

24576:bef/eWgnTevSFgxFWmSzMcXA8Qa3hf3kK+f0Jy/YZnqOmvSCYU83eEuCBElfsiny:1WgTe7ANVlYMRxLmvStZuCBEfAyTV18

Score

1^/10

Suspicious use of SetWindowsHookEx 6 IoCs

C:\Users\Admin\AppData\Local\Temp\qqbm\QQbm.exe
"C:\Users\Admin\AppData\Local\Temp\qqbm\QQbm.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4192
- C:\Users\Admin\AppData\Local\Temp\qqbm\config\QQBmAutoUpdate.exe
  "C:\Users\Admin\AppData\Local\Temp\qqbm\config\QQBmAutoUpdate.exe"
  2⤵
  PID:4684

memory/4684-10-0x0000000002460000-0x0000000002461000-memory.dmp

Filesize
4KB

Download
memory/4684-11-0x0000000000400000-0x00000000005AC000-memory.dmp

Filesize
1.7MB

Download