Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
20-01-2025 09:15
General
-
Target
QQռV7.0.exe
-
Size
1.8MB
-
MD5
e4d4156a763f4cb8e82df5ce6f5ad497
-
SHA1
fbcb7b3d6bf3ff44fb183933988152f8d426f0f5
-
SHA256
32776c05bbf19063cf6236eb62eacfe4f37a58dd057e2cf039b2bff26eacb73f
-
SHA512
23d44a7ca7651c04d5a6f47ffe89368702c2f9abaeb1dc9da22a3a862f4b6ffa6bfadafa2ad4d8309a0caad338e449e909cbb6315796603631d6694787e44ad0
-
SSDEEP
24576:+mDEUgkDkcILsKOBAbMpNf2FfWl8KuqGavkg3NyNIbbbIoIBAUZLY:hzgMzVBA2+s8KuqGaX0ToIBAUZLY
Score
5/10
Malware Config
Signatures
-
UPX packed file 26 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\QQռV7.0.exe"C:\Users\Admin\AppData\Local\Temp\QQռV7.0.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2976 -s 3242⤵
- Program crash
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
1024KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB