Analysis
- max time kernel
147s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
29/02/2024, 01:56
General
- Target QQQCWJL.exe
- Size 1.9MB
- Sample240229-ccwmeaba24
- SHA256 13f13241fe1a0546e09260cc5d13c4790b22bd0b9953f86d7c59c68f3fc4f859
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SendNotifyMessage 1 IoCs
- Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\QQQCWJL.exe"C:\Users\Admin\AppData\Local\Temp\QQQCWJL.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4544-0-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-2-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-4-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-6-0x0000000002570000-0x0000000002571000-memory.dmp
memory/4544-8-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-13-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-15-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-11-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-17-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-19-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-21-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-23-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-25-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-27-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-30-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-32-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-34-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-37-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-39-0x0000000002570000-0x0000000002571000-memory.dmp
memory/4544-41-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-43-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-46-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-49-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-51-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-53-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-55-0x0000000010000000-0x0000000010051000-memory.dmp
memory/4544-56-0x0000000010000000-0x0000000010051000-memory.dmp