Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

05bdc733bf...7d.exe

windows7-x64

10

05bdc733bf...7d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05bdc733bf04975715ffd5e1df85706e7c29d39e20e9bedf5f51ec0b382cf27d

  • Size

    81KB

  • Sample

    250316-zrxjkszsds

  • MD5

    35a00bfb373e78e6401a4806891bf7f3

  • SHA1

    f0437dd3a886877a186de5d26f5a2c126468cf16

  • SHA256

    05bdc733bf04975715ffd5e1df85706e7c29d39e20e9bedf5f51ec0b382cf27d

  • SHA512

    c38fdc2b53b0c39358ac179cddc46adf2fbb3590ceb2aee19357b0c86be8cbedda2bb8b2f15db8490b0bddea4d494be9d6d9b2f55754fd7d3f47b665db484592

  • SSDEEP

    1536:5zfMMkbSaaXQctbHToGtdj9f0Ir+n4YGEU3XR/yAO+FNjgpE0Piha:9fM1RqDX3jPrMGB35yAtg8a

Score
10/10
qqpassdiscoverytrojan

Malware Config

Extracted

Family

qqpass

C2

http://zc.qq.com/chs/index.html

Attributes
  • url

    http://i2.tietuku.com/8975c2a506763d03.jpg

  • user_agent

    Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)

Targets

    • Target

      05bdc733bf04975715ffd5e1df85706e7c29d39e20e9bedf5f51ec0b382cf27d

    • Size

      81KB

    • MD5

      35a00bfb373e78e6401a4806891bf7f3

    • SHA1

      f0437dd3a886877a186de5d26f5a2c126468cf16

    • SHA256

      05bdc733bf04975715ffd5e1df85706e7c29d39e20e9bedf5f51ec0b382cf27d

    • SHA512

      c38fdc2b53b0c39358ac179cddc46adf2fbb3590ceb2aee19357b0c86be8cbedda2bb8b2f15db8490b0bddea4d494be9d6d9b2f55754fd7d3f47b665db484592

    • SSDEEP

      1536:5zfMMkbSaaXQctbHToGtdj9f0Ir+n4YGEU3XR/yAO+FNjgpE0Piha:9fM1RqDX3jPrMGB35yAtg8a

    Score
    10/10
    qqpassdiscoverytrojan

    • QQpass

      QQpass is a trojan written in C++..

      trojanqqpass

    • Qqpass family

      qqpass

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks