General
-
Target
cd2b256127192a645cb0ee2f575bc480261bee0f5777b07fdf8fa23c6896cf48
-
Size
75KB
-
MD5
35aa48c51f67634ab9a05028ddacd91a
-
SHA1
41eda72d9456025eb0f881daac43f4b920fda1bd
-
SHA256
cd2b256127192a645cb0ee2f575bc480261bee0f5777b07fdf8fa23c6896cf48
-
SHA512
5e3433d76ae896da6a91b66a49d15026620261eaab93acf498a0ea913eb5461bf44d7afae81dcebc878e04810da86fd3dea90d82eebbebfa75d3df7e1f1d3d4a
-
SSDEEP
1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOWWJ:GhfxHNIreQm+HidWJ
Score
10/10
Malware Config
Extracted
Family
qqpass
C2
http://www.zigui.org/article.php?id=103822
Attributes
-
url
http://www.mxm9191.com/myrunner_up.exe
-
user_agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Signatures
-
Qqpass family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
cd2b256127192a645cb0ee2f575bc480261bee0f5777b07fdf8fa23c6896cf48
Headers
Sections