Overview
overview
7Static
static
3qq2006beta...ll.exe
windows7-x64
7qq2006beta...ll.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...er.dll
windows7-x64
1$PLUGINSDI...er.dll
windows10-2004-x64
1$PLUGINSDI...ll.dll
windows7-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$R0.dll
windows7-x64
1$R0.dll
windows10-2004-x64
1$SYSDIR/msvcp60.dll
windows7-x64
3$SYSDIR/msvcp60.dll
windows10-2004-x64
3$_33_/Mfc42.dll
windows7-x64
1$_33_/Mfc42.dll
windows10-2004-x64
1$_33_/Security.dll
windows7-x64
3$_33_/Security.dll
windows10-2004-x64
3$_33_/riched20.dll
windows7-x64
1$_33_/riched20.dll
windows10-2004-x64
1Mfc42.dll
windows7-x64
1Mfc42.dll
windows10-2004-x64
1QZone/Mfc42.dll
windows7-x64
1QZone/Mfc42.dll
windows10-2004-x64
1Riched32.dll
windows7-x64
1Riched32.dll
windows10-2004-x64
1Security.dll
windows7-x64
3Security.dll
windows10-2004-x64
3atl.dll
windows7-x64
1atl.dll
windows10-2004-x64
1General
-
Target
86f6a2238b9adaa18001de6496b1fca3
-
Size
18.6MB
-
Sample
240201-qdrazafhfl
-
MD5
86f6a2238b9adaa18001de6496b1fca3
-
SHA1
c294a2af23c5ddf40e7da24d19207ffef6f4f6fc
-
SHA256
4381902e014623740cf01e659fce422ad2c2ffd4dcf491be648b4b4cf4f0f7ec
-
SHA512
dca541aa4c4c90b32a63aef6f05ced15c44c8bd9f687514a43627f022b5cb67de579ea3d3cbc797bcf5cea4133cea6cd872d2338459d43ee079d4f0029142784
-
SSDEEP
393216:H+s5+tMVHUYVT1a2tE0kuxocJYTUfuXwpdSe1zhQ57elZQ6dVS:es5KYVTXtE0kuzhfuIdSWzhSIQ6dVS
Static task
static1
Behavioral task
behavioral1
Sample
qq2006beta2sp1full.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
qq2006beta2sp1full.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/KillProcDLL.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/ProcDll.dll
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/ProcDll.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/SysVer.dll
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/SysVer.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/VerDll.dll
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/VerDll.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral13
Sample
$R0.dll
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
$R0.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
$SYSDIR/msvcp60.dll
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
$SYSDIR/msvcp60.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
$_33_/Mfc42.dll
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
$_33_/Mfc42.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
$_33_/Security.dll
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
$_33_/Security.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral21
Sample
$_33_/riched20.dll
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
$_33_/riched20.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
Mfc42.dll
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
Mfc42.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
QZone/Mfc42.dll
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
QZone/Mfc42.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
Riched32.dll
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
Riched32.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
Security.dll
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
Security.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
atl.dll
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
atl.dll
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
qq2006beta2sp1full.exe
-
Size
18.6MB
-
MD5
99ba04d62aa387332b312fce7c91eedb
-
SHA1
1062cb1dae431b1a397f8c9fd77f274c9e1e58a0
-
SHA256
357d559b869fbbb4928827a17042e9a07bde09d4a10865c1dcaebb9fc3f40993
-
SHA512
19779db3020e9bfb38be78373237435fdae45c2bf719d4ce3ce8b2a420dead4ccebb1828f1b7469d1d68f2b5bb543d4bf804a865b4badb416e961f17dda70726
-
SSDEEP
393216:5kuVC1iaNGVcgKImYH3sUbz46mQNtw/xiB3MbAlJNlw8tw+hkiRtEck:LCQaNGWTImYH3sWZ7w/xbbAldwaAck
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/InstallOptions.dll
-
Size
12KB
-
MD5
4c7d97d0786ff08b20d0e8315b5fc3cb
-
SHA1
bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c
-
SHA256
75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84
-
SHA512
f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a
-
SSDEEP
192:6KdqJ4Bhf1mdCMI26t510swClJOeFIsm7F1QuPs:6KdE4zAddwR0swqOeFxu
Score3/10 -
-
-
Target
$PLUGINSDIR/KillProcDLL.dll
-
Size
4KB
-
MD5
c1e153f9fa1001eb9fb34bbc4a3f3927
-
SHA1
dfca2dcce9b0486114692a23776191627b0c9839
-
SHA256
e594544cc4b4a0a5439a2b9a79db14e580d815c87e353781c47d4eab5e313b8e
-
SHA512
d2a7c2853b56f60f710dcea27c346dbd22593c98e5c000c22650613851f26e505b12260bcfc050473e97c2796a91c94a3c201785dad4d95de0b4e2de35c3a41f
-
SSDEEP
48:C4ojqpOxUcbslAR1k5eKv8rbvHMgiqCmZuwJQ7TLSMXaIYatzbgAa4l5YAZ:SEeFslARoeK8rDHMgTCmj/MqoRb+4l
Score3/10 -
-
-
Target
$PLUGINSDIR/ProcDll.dll
-
Size
17KB
-
MD5
d041170690902802850df45c85fb93c9
-
SHA1
17ae934bb39cf571c5beb10c0f1bca274224e51d
-
SHA256
fad4524915bab01df31619828683b3dc88bef9a0a6b041105da53203f8248c62
-
SHA512
700c4db54fcadb8a8b5e68a986f53205a127b5d68a1a902e071ba9b61af1fe6ff62b8112cb2b97f02286c1feeee496f09fedf0a0317b761901194207c1082a7e
-
SSDEEP
384:nGDk2L/3TMD+W16BG4n8Z8HhHtAkrEArIqE1W1ggGJeP9Axn/VD3p:n7AoSWAoGw8HhHtEZfrnn/Vj
Score3/10 -
-
-
Target
$PLUGINSDIR/SysVer.dll
-
Size
20KB
-
MD5
8fb4e20fb1876bf27e24b0a652c9a8bd
-
SHA1
52b3eccb170cfcc3bd56891e4760220764ff1644
-
SHA256
730ff3b43c514959e29ad75daa744a3db8dc8b269fe2a3f317d8fa4e854315b3
-
SHA512
29a70c634d89114fe02f681476ca5a6af4921f07d2d3579f6cfa824983d86e3d8e9c6469f855a07e9164a68399609781e4feeb95dc6445875baa80492902c205
-
SSDEEP
12:etGSGQ4GAnoL6fLajK24u8By5f4ZRsoZIrHBpnqHEBPWLAMKyGgfzEJDba490GR/:etGSC45jWdBy50RDIFSWMKErYDV9LR
Score1/10 -
-
-
Target
$PLUGINSDIR/VerDll.dll
-
Size
5KB
-
MD5
539ec6d5456e17ed6c144770d1748aaf
-
SHA1
9746a5023f2752aa5f4537dda731c306b69d7942
-
SHA256
89eb71d2a255648eb1e8517cdfe43ad2bd6f816d6ae69db159ac8e10db5b1dbc
-
SHA512
16b57a2376b7b6be1721f4e9cd38341051fc8bc6589ed4a71e63deba9406d1d6323ad1d353ec0b7b03c9fbf52b52442425300dcbfe81d90c5770b96d2a5a37e0
-
SSDEEP
48:CzsLy3XKTysjTCZGIifyl+6RtYcnybzSVVgJkHqYWPpmR:MsLyqFqZGIifyl+6IY+z9JkHzWPp
Score3/10 -
-
-
Target
$R0
-
Size
40KB
-
MD5
453900b746a78151a4c97c152d234d50
-
SHA1
4f6960d80b7cbdc2767f94d3face804fcf00dd45
-
SHA256
5b845962a4aa049963af7475668e51dbcf72f3d9bf80a9849f1c16d1cc70344a
-
SHA512
39fd52161f5239279d5ba54f9f978ccc70889247a2a1f25003573769d63e6b40864c911dbf55e9160844bb017f7228b66b7257cb5a56fbe49d980c4023246e73
-
SSDEEP
384:LJ0CotehPTTlCnLS/ZuEjPmXZUSpgBjsLVKtMBeb:Wtmk4PyZUSeBjsLVKtMBy
Score1/10 -
-
-
Target
$SYSDIR/msvcp60.dll
-
Size
392KB
-
MD5
c5f6ac8b7ec19a4f4875c6434087ff55
-
SHA1
b5d599648daa5afb50a1faade5e79d52dc128537
-
SHA256
1a2a39a4ee6856bd6f60ade6e4cd42f7e38bd71e7ae829ac02ac77f4e2f1e87d
-
SHA512
377a0da00bdbcccd6854d12504dc017c6764117ebe0cbe1079a72dbea6ed1614351e73bebfc6803ddb9cfb36d5b68398daf22ace10189e39314a1462fbbef0a0
-
SSDEEP
6144:VoSn2tRSsVPd4ammCrKrn84QL2DldNQ3fq3OoxHkCmV0f1lH:uDtRXVPOMC+rLi2P+fq3OoxHkC5fr
Score3/10 -
-
-
Target
$_33_/Mfc42.dll
-
Size
972KB
-
MD5
08eabbd51ef3326014389e6039c06278
-
SHA1
b5a22ce71f54d5aa8fbe432191631b002bc4b10d
-
SHA256
456716d6bab61a392a5a99d3ed062cec3211c47f9fb78f76d95ee8d41577ed21
-
SHA512
88e5febbc2984da251e0dfd42a5da749b7930339956d7e90ad56f3601fed6bd4a17b5456f0ae70f01849ffa7ee9fff7132f7ee7b0a34514bf2ce211299635f7d
-
SSDEEP
12288:10AeYHUjb4eTQdLii8KzOs3MmnaKDc/1np96FXFLAJiVgP+zQci8Ii8:14Y02iI3YKDc/YX5+ZPgl8
Score1/10 -
-
-
Target
$_33_/Security.dll
-
Size
68KB
-
MD5
fe24dacc154cb537e9cb7cf08236addf
-
SHA1
80988974ffde0913be789687b12ababbc1cfc25f
-
SHA256
793f9a41e836a4700b491e4066bd2821fccac77eac7c4509c70d5f0d4fa7de36
-
SHA512
d1c1548d437110fa992a4734f49873786b435347281958f65635c39d081f0b5136290ab36d888c55029b5cdf56b44a0c9c67967ed875aa4f7d064a78f87e205c
-
SSDEEP
768:/yip5wHGO6PcWn5s2o+DyaXcGFpG8UCU2tJtKXJpFLEcinQzm1H9xllMGCV1H9xj:baGvokXcGFppUnmuJpdEFQS10107XW
Score3/10 -
-
-
Target
$_33_/riched20.dll
-
Size
406KB
-
MD5
121f377e9198cf0417a2818cb88dfff5
-
SHA1
9f31cac0f91f5e4504879bd80edc17c25f507592
-
SHA256
9fdbc8c557d3e8239570c7e4a7ab32662ec80cdb6b0c60ae11699000d5667acd
-
SHA512
fae9e1b31e5df211dfa8065bd05e7019d391b55d591d2ab3d6081f0d3421055007d810634bec699a473829e732e5e8a65122b69ae2faf2ca01cd0bb5659f8810
-
SSDEEP
12288:siorwW3oraYiG0q7+tbgNjeYbKBnziPdW6/cqXNRFQOaIn:forwW3K0MeYbKBz2YJczn
Score1/10 -
-
-
Target
Mfc42.dll
-
Size
972KB
-
MD5
08eabbd51ef3326014389e6039c06278
-
SHA1
b5a22ce71f54d5aa8fbe432191631b002bc4b10d
-
SHA256
456716d6bab61a392a5a99d3ed062cec3211c47f9fb78f76d95ee8d41577ed21
-
SHA512
88e5febbc2984da251e0dfd42a5da749b7930339956d7e90ad56f3601fed6bd4a17b5456f0ae70f01849ffa7ee9fff7132f7ee7b0a34514bf2ce211299635f7d
-
SSDEEP
12288:10AeYHUjb4eTQdLii8KzOs3MmnaKDc/1np96FXFLAJiVgP+zQci8Ii8:14Y02iI3YKDc/YX5+ZPgl8
Score1/10 -
-
-
Target
QZone/Mfc42.dll
-
Size
972KB
-
MD5
08eabbd51ef3326014389e6039c06278
-
SHA1
b5a22ce71f54d5aa8fbe432191631b002bc4b10d
-
SHA256
456716d6bab61a392a5a99d3ed062cec3211c47f9fb78f76d95ee8d41577ed21
-
SHA512
88e5febbc2984da251e0dfd42a5da749b7930339956d7e90ad56f3601fed6bd4a17b5456f0ae70f01849ffa7ee9fff7132f7ee7b0a34514bf2ce211299635f7d
-
SSDEEP
12288:10AeYHUjb4eTQdLii8KzOs3MmnaKDc/1np96FXFLAJiVgP+zQci8Ii8:14Y02iI3YKDc/YX5+ZPgl8
Score1/10 -
-
-
Target
Riched32.dll
-
Size
3KB
-
MD5
e6775a07d34f4f681ecd19cffa016ba3
-
SHA1
713801735ec99869e311c6f717848aae77fd8a3c
-
SHA256
7f66cd8059579099a033ea5785e22d281edac6dcbe9f1d1934ad4f05202365b2
-
SHA512
1ee7f488d6424ece43d3d01de75627039f6e2c0f1af9bd1023af95542c1ed059b6992be6be922af040bbb41daa9338538fb9ae6084621c53aa435394fc152792
Score1/10 -
-
-
Target
Security.dll
-
Size
68KB
-
MD5
fe24dacc154cb537e9cb7cf08236addf
-
SHA1
80988974ffde0913be789687b12ababbc1cfc25f
-
SHA256
793f9a41e836a4700b491e4066bd2821fccac77eac7c4509c70d5f0d4fa7de36
-
SHA512
d1c1548d437110fa992a4734f49873786b435347281958f65635c39d081f0b5136290ab36d888c55029b5cdf56b44a0c9c67967ed875aa4f7d064a78f87e205c
-
SSDEEP
768:/yip5wHGO6PcWn5s2o+DyaXcGFpG8UCU2tJtKXJpFLEcinQzm1H9xllMGCV1H9xj:baGvokXcGFppUnmuJpdEFQS10107XW
Score3/10 -
-
-
Target
atl.dll
-
Size
88KB
-
MD5
8f176603bded0602e1995628adcb6bf2
-
SHA1
b70d9baa9466f396324ce4083d2260f70df575a3
-
SHA256
d02ab83047d17a508b0b48ba824ed9f4d8025a258e60e80694d02c9d152144e0
-
SHA512
963e4f293e82617c10b72a7a47350bb38ddcd897ce4128a71ebdd3f7f4ec99cb06680eaf10238d1b04bb84afa682044e92f98f55c422fc8265d9c6f6dfdfc2c8
-
SSDEEP
1536:1DMGByFHkIShx6r1yEtOdCoCHWMHXdO0MKZwmpXcwUukX2:1X8HAAr1yEtOEHhc0PZwmaukX2
Score1/10 -