Analysis
-
max time kernel
125s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
09-05-2024 09:29
Static task
static1
Behavioral task
behavioral1
Sample
仿电脑版支付宝转账截图工具/仿电脑版支付宝转账截图工具.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
仿电脑版支付宝转账截图工具/仿电脑版支付宝转账截图工具.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
录像.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
录像.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
更多QQ活动.url
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
更多QQ活动.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
更多软件.url
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
更多软件.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
访问技术QQ网.url
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
访问技术QQ网.url
Resource
win10v2004-20240508-en
General
-
Target
访问技术QQ网.url
-
Size
522B
-
MD5
4b9fc21827748d918b940f759682f7f4
-
SHA1
07e494f7740756b5f92c0376cedaf5a8bda092d2
-
SHA256
646c02400df4cdf29e43edea566c0283e44e00e116e4a71fe04eec9f8b1a28cc
-
SHA512
ac88e4bd3926cdf6fb537e9a32fb0b254b3606c9f8f360b52d8769badac4efa2ca05ead880ace973f5afecba14702d2c33196626a54b5ca731e4c83a271eeabe
Malware Config
Signatures
Processes
-
C:\Windows\System32\rundll32.exe"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL C:\Users\Admin\AppData\Local\Temp\访问技术QQ网.url1⤵PID:2280
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4204,i,11266875042087428226,16669718873272757238,262144 --variations-seed-version --mojo-platform-channel-handle=4120 /prefetch:81⤵PID:4776