Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
05/10/2024, 05:55
General
-
Target
暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/GetQQMail.exe
-
Size
30KB
-
MD5
6203fe78d89a26e3a7c16daad0cc6dfd
-
SHA1
25bbe767d25adb8a0c4d44063014605ee7f30b1c
-
SHA256
542e1cedc22a3b1099594dd843a9dc74cdf3ecc3c07cf3027c781bcc8c19cd8d
-
SHA512
36ea92db362af186faf410d4736b94cd6a795fa84d30ceaf154a887083187ff0646549294f8e5d8230b8e870bb5503f67eb8dbcd94f29ec72069fce285702d36
-
SSDEEP
384:ERgaAXnPwbjWOiheygh7e2ojCa44d19LFDOT4LvtYNw2v1+:rvXnP/OfyghM+/4PcOtYNwA
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\暴雨在线QQ搜索2009\暴雨在线QQ搜索注册版\GetQQMail.exe"C:\Users\Admin\AppData\Local\Temp\暴雨在线QQ搜索2009\暴雨在线QQ搜索注册版\GetQQMail.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
84KB
-
Filesize
4KB
-
Filesize
536KB
-
Filesize
536KB
-
Filesize
536KB
-
Filesize
536KB
-
Filesize
536KB
-
Filesize
536KB
-
Filesize
536KB
-
Filesize
536KB
-
Filesize
536KB
-
Filesize
536KB
-
Filesize
536KB
-
Filesize
536KB
-
Filesize
536KB
-
Filesize
60KB
-
Filesize
84KB
-
Filesize
4KB
-
Filesize
536KB
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
84KB
-
Filesize
84KB