Files named WeChatApp.exe

1.14.155.221 · WeChatApp.exe

/

China · Shenzhen Tencent Computer Systems Company Limited

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 27ddbbb295e94bdf6219db89ae278a2cb8a3347f
SHA256: 628f0129b915e93cca790525c1efd4876e11e30dba5e37bef0d66fc72afe2632
application/octet-stream
13.16MB
2021-04-20 04:05:58 +0000 UTC
49.232.251.55 · WeChatApp.exe

/AppData/Roaming/Tencent/WeChat/XPlugin/Plugins/XWeb/732/extracted/

China · Shenzhen Tencent Computer Systems Company Limited

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 441df20b729df5c2dd27467937cfb468ffcf63d8
SHA256: fd67947710916ca2d59607b7194ea0e7ebb9784239627483c6eb32d53db1beee
application/octet-stream
13.30MB
2022-04-29 14:43:34 +0000 UTC
1.14.155.221 · WeChatApp.exe

/

China · Shenzhen Tencent Computer Systems Company Limited

Yara INDICATOR_EXE_Packed_VMProtect From AlienVault by ditekSHen

Download archived sample
The password is "infected"

SHA1: 27ddbbb295e94bdf6219db89ae278a2cb8a3347f
SHA256: 628f0129b915e93cca790525c1efd4876e11e30dba5e37bef0d66fc72afe2632
application/octet-stream
13.16MB
2021-04-20 04:05:58 +0000 UTC