Analysis
-
max time kernel
140s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
05/03/2024, 18:05
General
-
Target
QQemailss/QQemail.exe
-
Size
1.5MB
-
MD5
bbfbfed065e974c6f8c1a696e54406b6
-
SHA1
4565447933eb90d014beca8f7747a76d52aa1afa
-
SHA256
ec80e948f210a3834a8accd4e6f11668a53254ded3e97d7aae4e3f7f800faebb
-
SHA512
1ad77e9de3db584f58898b7a7cdc78d740d8dcd3083a8b4dfc509d8473ffea07941aa19256a8c2a87e3f38968c93263680e60ce7db9baa8095ba6141a76a59fe
-
SSDEEP
24576:XLuQmXfVTzSSMXwYi4Cv1JHgi28p3nZpufSJn8kZMx1GfzR4PglY5WQu:rmPcjXwsCNJAi2uyy8WMxqziPglr
Malware Config
Signatures
-
Loads dropped DLL 5 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 64 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\QQemailss\QQemail.exe"C:\Users\Admin\AppData\Local\Temp\QQemailss\QQemail.exe"1⤵
- Loads dropped DLL
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
212KB
MD54c9e8f81bf741a61915d0d4fc49d595e
SHA1d033008b3a0e5d3fc8876e0423ee5509ecb3897c
SHA256951d725f4a12cd4ff713ca147fa3be08a02367db6731283c3f1ba30445990129
SHA512cf2c6f8f471c8a5aad563bc257035515860689b73ce343599c7713de8bc8338a031a722f366e005bc1907d6fc97b68b8b415e8ff05b7324fb1040c5dc02315d7
-
Filesize
212KB
MD5d147032073df12d9d35848b573dc552c
SHA1e9823b0f6ea6d316e94bdc9fe2e98a6316ac31c8
SHA2567a27f0354e55162fcf4f90785c839b07ad7645117b4f1d7fdf004169e08a7381
SHA512521c4a92bddc50bd9964388c48c6ff6478477690685a74976a928910bc7029418b24aef894ab54439dec7574fb2c3735898a71b9e2884e7efa1478909483c06c
-
Filesize
368KB
MD5ed760350798b43e32a7a580680cdbcd1
SHA1a1f7913a326a980416e8ac1404a68b7dfd3869eb
SHA25626e0581fc0fe2f51fb1730917538cee9af587a3e156b0e8dcd050b15dccba863
SHA512a24c11453678a1dd4e6521b3ebbac8b01a00458c329239bd3519e84a97cad4963070d715eeba610392eb793486fdc7bea5d073c084eac4aae6da00073aca7841
-
Filesize
1.1MB
MD53fe72f93ab5f24a0ea2d753013a41c4b
SHA19206cd206c0b2782a2b1ad1d19ace97bae6e491e
SHA256db32e8ea1d91009ca25b79d7e863a08be56632641a7a145326fbfbf0931b6c79
SHA51224ce75304e6b5508d9bbf425a68b1907bc51f30c168dd3b800f34e1f7fc1aee044818848d1fde40e7556af5f16f94ea02d19344bd9ffda1a6d011a624d6f46e9
-
Filesize
48KB
MD537a58e1c5ce48e401ee8dd1d1da54814
SHA1a87d00d78838c2d968b72330ee6f21f69b2caae5
SHA2561c426928fb90bedb31fcffa0f3fbe7bdbca4259f93f5abdefed6a9a089f2982c
SHA512e85052fc305040bdcaf47262e0ce6eef0848b319baac72a076dc94e7d20ea7ad8fbdd7d5381606a3154ab84fe81429bb339123ac1cd94551b1dc9cecfb7a08bf
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
432KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
16KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
268KB
-
Filesize
4KB
-
Filesize
432KB
-
Filesize
4KB
-
Filesize
224KB
-
Filesize
336KB
-
Filesize
52KB
-
Filesize
432KB
-
Filesize
336KB