Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19/09/2024, 05:54
General
-
Target
等待QQ空间留言批量删除器 v1.0/等待QQ空间留言批量删除器v1.0.exe
-
Size
600KB
-
MD5
07863b914ed84bcfe0ff101781bc3b82
-
SHA1
455fb910ac5e3ed0d2743c8a2defc1a1426075e0
-
SHA256
46e08abab07c3454801514cea4d328cc4c96c2691ef11526cba5b7dcc0ad8700
-
SHA512
64dbf34d4f6abd229a650dcde11a9df6c37407e90a68f9721fd106614f3e12f690ce818be44661413046d988275d79514f8ab77394c153beb107ae7e732efa54
-
SSDEEP
12288:SXKNcA9hT7QJ+64qcpTMWPjAUuo2Vt78X+aZorXM7YPXPW:S6N3a+dr/0Uu5x8RM87Y2
Malware Config
Signatures
-
UPX packed file 31 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\等待QQ空间留言批量删除器 v1.0\等待QQ空间留言批量删除器v1.0.exe"C:\Users\Admin\AppData\Local\Temp\等待QQ空间留言批量删除器 v1.0\等待QQ空间留言批量删除器v1.0.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
1.5MB
-
Filesize
248KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB