Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
07-09-2024 22:24
General
-
Target
QQ空间全能助手/QQ空间全能助手2.3 去广告 by Loading.exe
-
Size
458KB
-
MD5
dfbe0e3c6e7e4fedd0e7e5f157de5f8d
-
SHA1
a11b1b19a283bb06f69d061f9a685cc60ba40bfe
-
SHA256
42eaea59ff3a6b3cfd71bb22e98827dbaa70dec40586c75e1e8c8ca96ce24199
-
SHA512
dcc2b5c4e8913ac43cd393679af206828727486cf499fcf6efd24f8189035da631ea0bc52aa84fb4e6815bd04bdbbeca5d0470191bef824beee34eb57db3fff4
-
SSDEEP
6144:1frpBRQA6CPpmHdvdUCKO45adF58vvQeUflxUcJJ2dLuMXpS:1frFQA6CPpwMadFKvvQeUflWcJsdLU
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\QQ空间全能助手\QQ空间全能助手2.3 去广告 by Loading.exe"C:\Users\Admin\AppData\Local\Temp\QQ空间全能助手\QQ空间全能助手2.3 去广告 by Loading.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
458KB
-
Filesize
458KB