General

  • Target

    86f6a2238b9adaa18001de6496b1fca3

  • Size

    18.6MB

  • Sample

    240201-qdrazafhfl

  • MD5

    86f6a2238b9adaa18001de6496b1fca3

  • SHA1

    c294a2af23c5ddf40e7da24d19207ffef6f4f6fc

  • SHA256

    4381902e014623740cf01e659fce422ad2c2ffd4dcf491be648b4b4cf4f0f7ec

  • SHA512

    dca541aa4c4c90b32a63aef6f05ced15c44c8bd9f687514a43627f022b5cb67de579ea3d3cbc797bcf5cea4133cea6cd872d2338459d43ee079d4f0029142784

  • SSDEEP

    393216:H+s5+tMVHUYVT1a2tE0kuxocJYTUfuXwpdSe1zhQ57elZQ6dVS:es5KYVTXtE0kuzhfuIdSWzhSIQ6dVS

Score
7/10

Malware Config

Targets

    • Target

      qq2006beta2sp1full.exe

    • Size

      18.6MB

    • MD5

      99ba04d62aa387332b312fce7c91eedb

    • SHA1

      1062cb1dae431b1a397f8c9fd77f274c9e1e58a0

    • SHA256

      357d559b869fbbb4928827a17042e9a07bde09d4a10865c1dcaebb9fc3f40993

    • SHA512

      19779db3020e9bfb38be78373237435fdae45c2bf719d4ce3ce8b2a420dead4ccebb1828f1b7469d1d68f2b5bb543d4bf804a865b4badb416e961f17dda70726

    • SSDEEP

      393216:5kuVC1iaNGVcgKImYH3sUbz46mQNtw/xiB3MbAlJNlw8tw+hkiRtEck:LCQaNGWTImYH3sWZ7w/xbbAldwaAck

    Score
    7/10
    • Loads dropped DLL

    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      12KB

    • MD5

      4c7d97d0786ff08b20d0e8315b5fc3cb

    • SHA1

      bb6f475e867b2bf55e4cd214bd4ef68e26d70f6c

    • SHA256

      75e20f4c5eb00e9e5cb610273023e9d2c36392fa3b664c264b736c7cc2d1ac84

    • SHA512

      f37093fd5cdda74d8f7376c60a05b442f884e9d370347c7c39d84eca88f23fbea6221da2e57197acd78c817a74703c49fb28b89d41c3e34817cc9301b0b6485a

    • SSDEEP

      192:6KdqJ4Bhf1mdCMI26t510swClJOeFIsm7F1QuPs:6KdE4zAddwR0swqOeFxu

    Score
    3/10
    • Target

      $PLUGINSDIR/KillProcDLL.dll

    • Size

      4KB

    • MD5

      c1e153f9fa1001eb9fb34bbc4a3f3927

    • SHA1

      dfca2dcce9b0486114692a23776191627b0c9839

    • SHA256

      e594544cc4b4a0a5439a2b9a79db14e580d815c87e353781c47d4eab5e313b8e

    • SHA512

      d2a7c2853b56f60f710dcea27c346dbd22593c98e5c000c22650613851f26e505b12260bcfc050473e97c2796a91c94a3c201785dad4d95de0b4e2de35c3a41f

    • SSDEEP

      48:C4ojqpOxUcbslAR1k5eKv8rbvHMgiqCmZuwJQ7TLSMXaIYatzbgAa4l5YAZ:SEeFslARoeK8rDHMgTCmj/MqoRb+4l

    Score
    3/10
    • Target

      $PLUGINSDIR/ProcDll.dll

    • Size

      17KB

    • MD5

      d041170690902802850df45c85fb93c9

    • SHA1

      17ae934bb39cf571c5beb10c0f1bca274224e51d

    • SHA256

      fad4524915bab01df31619828683b3dc88bef9a0a6b041105da53203f8248c62

    • SHA512

      700c4db54fcadb8a8b5e68a986f53205a127b5d68a1a902e071ba9b61af1fe6ff62b8112cb2b97f02286c1feeee496f09fedf0a0317b761901194207c1082a7e

    • SSDEEP

      384:nGDk2L/3TMD+W16BG4n8Z8HhHtAkrEArIqE1W1ggGJeP9Axn/VD3p:n7AoSWAoGw8HhHtEZfrnn/Vj

    Score
    3/10
    • Target

      $PLUGINSDIR/SysVer.dll

    • Size

      20KB

    • MD5

      8fb4e20fb1876bf27e24b0a652c9a8bd

    • SHA1

      52b3eccb170cfcc3bd56891e4760220764ff1644

    • SHA256

      730ff3b43c514959e29ad75daa744a3db8dc8b269fe2a3f317d8fa4e854315b3

    • SHA512

      29a70c634d89114fe02f681476ca5a6af4921f07d2d3579f6cfa824983d86e3d8e9c6469f855a07e9164a68399609781e4feeb95dc6445875baa80492902c205

    • SSDEEP

      12:etGSGQ4GAnoL6fLajK24u8By5f4ZRsoZIrHBpnqHEBPWLAMKyGgfzEJDba490GR/:etGSC45jWdBy50RDIFSWMKErYDV9LR

    Score
    1/10
    • Target

      $PLUGINSDIR/VerDll.dll

    • Size

      5KB

    • MD5

      539ec6d5456e17ed6c144770d1748aaf

    • SHA1

      9746a5023f2752aa5f4537dda731c306b69d7942

    • SHA256

      89eb71d2a255648eb1e8517cdfe43ad2bd6f816d6ae69db159ac8e10db5b1dbc

    • SHA512

      16b57a2376b7b6be1721f4e9cd38341051fc8bc6589ed4a71e63deba9406d1d6323ad1d353ec0b7b03c9fbf52b52442425300dcbfe81d90c5770b96d2a5a37e0

    • SSDEEP

      48:CzsLy3XKTysjTCZGIifyl+6RtYcnybzSVVgJkHqYWPpmR:MsLyqFqZGIifyl+6IY+z9JkHzWPp

    Score
    3/10
    • Target

      $R0

    • Size

      40KB

    • MD5

      453900b746a78151a4c97c152d234d50

    • SHA1

      4f6960d80b7cbdc2767f94d3face804fcf00dd45

    • SHA256

      5b845962a4aa049963af7475668e51dbcf72f3d9bf80a9849f1c16d1cc70344a

    • SHA512

      39fd52161f5239279d5ba54f9f978ccc70889247a2a1f25003573769d63e6b40864c911dbf55e9160844bb017f7228b66b7257cb5a56fbe49d980c4023246e73

    • SSDEEP

      384:LJ0CotehPTTlCnLS/ZuEjPmXZUSpgBjsLVKtMBeb:Wtmk4PyZUSeBjsLVKtMBy

    Score
    1/10
    • Target

      $SYSDIR/msvcp60.dll

    • Size

      392KB

    • MD5

      c5f6ac8b7ec19a4f4875c6434087ff55

    • SHA1

      b5d599648daa5afb50a1faade5e79d52dc128537

    • SHA256

      1a2a39a4ee6856bd6f60ade6e4cd42f7e38bd71e7ae829ac02ac77f4e2f1e87d

    • SHA512

      377a0da00bdbcccd6854d12504dc017c6764117ebe0cbe1079a72dbea6ed1614351e73bebfc6803ddb9cfb36d5b68398daf22ace10189e39314a1462fbbef0a0

    • SSDEEP

      6144:VoSn2tRSsVPd4ammCrKrn84QL2DldNQ3fq3OoxHkCmV0f1lH:uDtRXVPOMC+rLi2P+fq3OoxHkC5fr

    Score
    3/10
    • Target

      $_33_/Mfc42.dll

    • Size

      972KB

    • MD5

      08eabbd51ef3326014389e6039c06278

    • SHA1

      b5a22ce71f54d5aa8fbe432191631b002bc4b10d

    • SHA256

      456716d6bab61a392a5a99d3ed062cec3211c47f9fb78f76d95ee8d41577ed21

    • SHA512

      88e5febbc2984da251e0dfd42a5da749b7930339956d7e90ad56f3601fed6bd4a17b5456f0ae70f01849ffa7ee9fff7132f7ee7b0a34514bf2ce211299635f7d

    • SSDEEP

      12288:10AeYHUjb4eTQdLii8KzOs3MmnaKDc/1np96FXFLAJiVgP+zQci8Ii8:14Y02iI3YKDc/YX5+ZPgl8

    Score
    1/10
    • Target

      $_33_/Security.dll

    • Size

      68KB

    • MD5

      fe24dacc154cb537e9cb7cf08236addf

    • SHA1

      80988974ffde0913be789687b12ababbc1cfc25f

    • SHA256

      793f9a41e836a4700b491e4066bd2821fccac77eac7c4509c70d5f0d4fa7de36

    • SHA512

      d1c1548d437110fa992a4734f49873786b435347281958f65635c39d081f0b5136290ab36d888c55029b5cdf56b44a0c9c67967ed875aa4f7d064a78f87e205c

    • SSDEEP

      768:/yip5wHGO6PcWn5s2o+DyaXcGFpG8UCU2tJtKXJpFLEcinQzm1H9xllMGCV1H9xj:baGvokXcGFppUnmuJpdEFQS10107XW

    Score
    3/10
    • Target

      $_33_/riched20.dll

    • Size

      406KB

    • MD5

      121f377e9198cf0417a2818cb88dfff5

    • SHA1

      9f31cac0f91f5e4504879bd80edc17c25f507592

    • SHA256

      9fdbc8c557d3e8239570c7e4a7ab32662ec80cdb6b0c60ae11699000d5667acd

    • SHA512

      fae9e1b31e5df211dfa8065bd05e7019d391b55d591d2ab3d6081f0d3421055007d810634bec699a473829e732e5e8a65122b69ae2faf2ca01cd0bb5659f8810

    • SSDEEP

      12288:siorwW3oraYiG0q7+tbgNjeYbKBnziPdW6/cqXNRFQOaIn:forwW3K0MeYbKBz2YJczn

    Score
    1/10
    • Target

      Mfc42.dll

    • Size

      972KB

    • MD5

      08eabbd51ef3326014389e6039c06278

    • SHA1

      b5a22ce71f54d5aa8fbe432191631b002bc4b10d

    • SHA256

      456716d6bab61a392a5a99d3ed062cec3211c47f9fb78f76d95ee8d41577ed21

    • SHA512

      88e5febbc2984da251e0dfd42a5da749b7930339956d7e90ad56f3601fed6bd4a17b5456f0ae70f01849ffa7ee9fff7132f7ee7b0a34514bf2ce211299635f7d

    • SSDEEP

      12288:10AeYHUjb4eTQdLii8KzOs3MmnaKDc/1np96FXFLAJiVgP+zQci8Ii8:14Y02iI3YKDc/YX5+ZPgl8

    Score
    1/10
    • Target

      QZone/Mfc42.dll

    • Size

      972KB

    • MD5

      08eabbd51ef3326014389e6039c06278

    • SHA1

      b5a22ce71f54d5aa8fbe432191631b002bc4b10d

    • SHA256

      456716d6bab61a392a5a99d3ed062cec3211c47f9fb78f76d95ee8d41577ed21

    • SHA512

      88e5febbc2984da251e0dfd42a5da749b7930339956d7e90ad56f3601fed6bd4a17b5456f0ae70f01849ffa7ee9fff7132f7ee7b0a34514bf2ce211299635f7d

    • SSDEEP

      12288:10AeYHUjb4eTQdLii8KzOs3MmnaKDc/1np96FXFLAJiVgP+zQci8Ii8:14Y02iI3YKDc/YX5+ZPgl8

    Score
    1/10
    • Target

      Riched32.dll

    • Size

      3KB

    • MD5

      e6775a07d34f4f681ecd19cffa016ba3

    • SHA1

      713801735ec99869e311c6f717848aae77fd8a3c

    • SHA256

      7f66cd8059579099a033ea5785e22d281edac6dcbe9f1d1934ad4f05202365b2

    • SHA512

      1ee7f488d6424ece43d3d01de75627039f6e2c0f1af9bd1023af95542c1ed059b6992be6be922af040bbb41daa9338538fb9ae6084621c53aa435394fc152792

    Score
    1/10
    • Target

      Security.dll

    • Size

      68KB

    • MD5

      fe24dacc154cb537e9cb7cf08236addf

    • SHA1

      80988974ffde0913be789687b12ababbc1cfc25f

    • SHA256

      793f9a41e836a4700b491e4066bd2821fccac77eac7c4509c70d5f0d4fa7de36

    • SHA512

      d1c1548d437110fa992a4734f49873786b435347281958f65635c39d081f0b5136290ab36d888c55029b5cdf56b44a0c9c67967ed875aa4f7d064a78f87e205c

    • SSDEEP

      768:/yip5wHGO6PcWn5s2o+DyaXcGFpG8UCU2tJtKXJpFLEcinQzm1H9xllMGCV1H9xj:baGvokXcGFppUnmuJpdEFQS10107XW

    Score
    3/10
    • Target

      atl.dll

    • Size

      88KB

    • MD5

      8f176603bded0602e1995628adcb6bf2

    • SHA1

      b70d9baa9466f396324ce4083d2260f70df575a3

    • SHA256

      d02ab83047d17a508b0b48ba824ed9f4d8025a258e60e80694d02c9d152144e0

    • SHA512

      963e4f293e82617c10b72a7a47350bb38ddcd897ce4128a71ebdd3f7f4ec99cb06680eaf10238d1b04bb84afa682044e92f98f55c422fc8265d9c6f6dfdfc2c8

    • SSDEEP

      1536:1DMGByFHkIShx6r1yEtOdCoCHWMHXdO0MKZwmpXcwUukX2:1X8HAAr1yEtOEHhc0PZwmaukX2

    Score
    1/10

MITRE ATT&CK Matrix

Tasks