734444487ecda2415875052f39dc1ab186040390a038a410bb804880d6545cb5 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27/05/2024, 06:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

歌曲排序工具/qmp32tool.exe
Size

35KB
MD5

664cc2d5b5497830556390407024bd62
SHA1

7f7c0147d0efe836e497b8947a6a4a28294cee07
SHA256

6f7ee3ed084c3205dba13b27a3099fbd9b97de1d64d144823d5699faa3347c98
SHA512

212c94fe1890ddaf50535e503bd5b6f0af8a3e222b2eacaa5975197d106462325c2315efbcd2b875236496c62b33c330988b9f0b4e0c543aae7685aeb8b4457b
SSDEEP

768:hMmzAYizd9AF8BVZ+vBOKmjaXgILj7jPEQZISO/e:hD8Y0iiK/QIvnPFZo/e

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral7/memory/2188-0-0x0000000001000000-0x000000000101A000-memory.dmp	upx
behavioral7/memory/2188-1-0x0000000001000000-0x000000000101A000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\歌曲排序工具\qmp32tool.exe
"C:\Users\Admin\AppData\Local\Temp\歌曲排序工具\qmp32tool.exe"
1⤵
PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2188-0-0x0000000001000000-0x000000000101A000-memory.dmp

Filesize
104KB

Download
memory/2188-1-0x0000000001000000-0x000000000101A000-memory.dmp

Filesize
104KB

Download