Overview
overview
3Static
static
3QQ空间�...��.exe
windows7-x64
1QQ空间�...��.exe
windows10-2004-x64
1QQ空间�...��.exe
windows7-x64
1QQ空间�...��.exe
windows10-2004-x64
1QQ空间�...��.exe
windows7-x64
1QQ空间�...��.exe
windows10-2004-x64
1实用软件.url
windows7-x64
1实用软件.url
windows10-2004-x64
1更多QQ活动.url
windows7-x64
1更多QQ活动.url
windows10-2004-x64
1访问技术QQ网.url
windows7-x64
1访问技术QQ网.url
windows10-2004-x64
1Analysis
-
max time kernel
124s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
14/06/2024, 08:57
Static task
static1
Behavioral task
behavioral1
Sample
QQ空间助手-秒赞秒评刷留言批量删说说.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
QQ空间助手-秒赞秒评刷留言批量删说说.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
QQ空间秒赞工具.exe
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
QQ空间秒赞工具.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
QQ空间秒赞秒评秒回复秒留言等功能.exe
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
QQ空间秒赞秒评秒回复秒留言等功能.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
实用软件.url
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
实用软件.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
更多QQ活动.url
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
更多QQ活动.url
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
访问技术QQ网.url
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
访问技术QQ网.url
Resource
win10v2004-20240611-en
General
-
Target
QQ空间秒赞秒评秒回复秒留言等功能.exe
-
Size
12.4MB
-
MD5
af92d5248d01a248f5e99d5a15e162e5
-
SHA1
aa86535d024d639279db8b5204801764d5bedfc9
-
SHA256
6f83322ebd8a3dccddb8376d3662296c0e888f2e9d24e17bad40156ef79c1f22
-
SHA512
ba23b7ce06652e8e1a4d33155764ec33f507bfab0f81bb12c02170cb395c21f63573e7770fa2cadc57985ba32a1dafdfe80dfc8096e61c4213f09d320b17a19b
-
SSDEEP
393216:CBVEi7ki5rQlCmPbnw/XvkLBzJ3r4Dt+gh4b:CBVEi9yUmPbnw/f2t3kUghS
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\QQ空间秒赞秒评秒回复秒留言等功能.exe"C:\Users\Admin\AppData\Local\Temp\QQ空间秒赞秒评秒回复秒留言等功能.exe"1⤵PID:2180
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=1444,i,3549704109630749084,1975543916261970610,262144 --variations-seed-version --mojo-platform-channel-handle=3892 /prefetch:81⤵PID:396