Analysis
-
max time kernel
145s -
max time network
117s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
30-05-2024 15:30
Behavioral task
behavioral1
Sample
使用说明.url
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
使用说明.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
凌哥QQ飞车智能刷喇叭辅助V1.0.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
凌哥QQ飞车智能刷喇叭辅助V1.0.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
极速软件下载.url
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
极速软件下载.url
Resource
win10v2004-20240508-en
General
-
Target
凌哥QQ飞车智能刷喇叭辅助V1.0.exe
-
Size
1.6MB
-
MD5
9ad5a3956d7061ec2fe44b580ddc70fb
-
SHA1
77046cd0241877a572d3b88061df8528ba33a103
-
SHA256
2f7fb3d80738ecd6d9bb5c3d4dd7bebc69b1a4c38a9391bd4faf199e8c8bc1cb
-
SHA512
92bf1287967fc3d39218ea3c90c8fb46e20cd8fe6f58a790b12e5b99daf83b5e0ec402e836d1a8b48e0d3c630633156216cf63ef5ec52de5e31084cb0c992a87
-
SSDEEP
24576:roK5wICnayOHVnhv+6QvuWrpQQzM6rDErG2Wp06N3jrAmW8cACtwMkWn6IImpE98:MKwn/N+OpQQAoDErnWrbbcBam29pS
Malware Config
Signatures
-
resource yara_rule behavioral4/memory/2168-0-0x0000000000400000-0x0000000000696000-memory.dmp upx behavioral4/memory/2168-2-0x0000000000400000-0x0000000000696000-memory.dmp upx -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2168 凌哥QQ飞车智能刷喇叭辅助V1.0.exe 2168 凌哥QQ飞车智能刷喇叭辅助V1.0.exe