Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 05:06
Static task
static1
Behavioral task
behavioral1
Sample
gxyav.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
gxyav.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
mvqc.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
mvqc.dll
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
任意QQ查好友工具v1.0.exe
Resource
win7-20240215-en
Behavioral task
behavioral6
Sample
任意QQ查好友工具v1.0.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
新云软件.url
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
新云软件.url
Resource
win10v2004-20240226-en
General
-
Target
任意QQ查好友工具v1.0.exe
-
Size
48KB
-
MD5
bdba9258cc514a08bbd04a66ac1c135c
-
SHA1
aff0b582f133bfae1d29474ea396cf84f6414f14
-
SHA256
60af763d456e6909f5e783db54beef2ca16def5ead5b211dc96c2eee9ad3cf04
-
SHA512
a5d2a49ed9aef3a7af96458a530fdd7afbc5809831d814a57f447db7763182c5254140914ad9f8e4c1bf726dd5a6a22f5465d99f9ed17da523fffb10721ab0b2
-
SSDEEP
768:Rt+DtRcoCd2Y5xCM13aiBszTI0Ccy3AlK3GkNZpo:RsBRnQ2YnCudczy3A0to
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 23 IoCs
pid Process 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe 2824 任意QQ查好友工具v1.0.exe