hxxps://qnwallpaper.keansoft[.]cn/URL
Reported by 1 independent source · first reported by Kaspersky Securelist · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
ValleyRAT masquerading as adware“…egardless of the file name, the installer deploys a modified Chinese desktop wallpaper management tool called QN Wallpaper (hxxps://qnwallpaper.keansoft[.]cn/) and adds it to the registry’s autorun entries.”
Indicators reported together
named in the same reports- c24e99f9437feacaa63766a3cde3fe3din 1 report
- hxxps://meeting.tencent[.]com/download/in 1 report
- qnwallpaper.keansoft[.]cnin 1 report
- 7ad1e3ef4e6d9d636c9e7e967733850ein 1 report
- 96b4c1d0683dce22bd3223e1e40689c1in 1 report
- 9b86d3ab6cef15c633933fbbeab39c0ain 1 report
- edfdc30cbd85879776b8f735ea7de1f1in 1 report
- 07ddbbe2c71c45577a7a4fbcdba0df91in 1 report
- 48826d5ca845979d2e6ebd66dc1aae90in 1 report
- 6c158c0f8e029342192d4f0d72e102b7in 1 report
- 9a71d6a41cd258b9e89cdc5fc224de73in 1 report
- 8a626d844943da3456b044f38deae3a2in 1 report
- 103.45.66[.]18in 1 report
- 192.253.225[.]173in 1 report
Copy these 14 indicators · defanged
Thanks — we review every report.