General

  • Target

    c96edc1d61ab02eaca223a545daf698bb8f8fd96205fa6e21a0f0ca9c6faa234

  • Size

    2.9MB

  • MD5

    b196d2bae60013f06e1db9d0fb95465b

  • SHA1

    922b84227433b60479e6389c1d2da90b198ab70a

  • SHA256

    c96edc1d61ab02eaca223a545daf698bb8f8fd96205fa6e21a0f0ca9c6faa234

  • SHA512

    46777738a8e7271cf72b05c69a282ee10e844b46805b759e21c74c374cdd89adef517cd91daeb9edf831f8d36157352c23613b9d92a79f82bb3069d2a96e85a6

  • SSDEEP

    49152:d99V0FaqjZG5pNz6gk24o5Bd1EPFFYGlAglbCWDV54ycuUjR6JUbQyFLaNmUm6DW:P0FXIpNz6a5rm9ug4cVFq6KEykNmc8es

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in qr code identified

    Detects presence of HTTP links in QR codes.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c96edc1d61ab02eaca223a545daf698bb8f8fd96205fa6e21a0f0ca9c6faa234
    .zip
  • VxKex/#XIAOYI.VC.url
    .url
  • VxKex/#��ע����.url
    .url
  • VxKex/#��ȡ����.png
    .png
    • http://weixin.qq.com/r/c0QvNzrEjmfxrX5U9xFh

  • VxKex/#���ǵ�Ⱥ.txt
  • VxKex/VxKex.exe
    .exe windows:4 windows x86 arch:x86

    7a5e2524b66da5177b4ec46d305a3dd7


    Headers

    Imports

    Sections