General

  • Target

    f4054cff11bed4262ce7f99fd3cb69c3358102cf3543ddc4428742b73745fde9

  • Size

    4.1MB

  • MD5

    c9c871c8f3b28b0ebc3c9055226fa0e0

  • SHA1

    49931a0f0c180edcf3533faab83e95cf23acb71f

  • SHA256

    f4054cff11bed4262ce7f99fd3cb69c3358102cf3543ddc4428742b73745fde9

  • SHA512

    4678872dfddbb0cafe38efa8a856ea8e234b1b96d14c08d642fd905fc3400957c0190ee629e21150238ac6dac4e82b526a30d39209947a97d142550dc3295b54

  • SSDEEP

    98304:EkwrtA7QIme6a4TVFUW+lFwNXOs7QHBmKgwNKBpr/WC6qhh/G2:9gR5e6TkW+I9t0H0KgyA/WC6qhh/L

Score
N/A

Malware Config

Signatures

Files

  • f4054cff11bed4262ce7f99fd3cb69c3358102cf3543ddc4428742b73745fde9
    .zip
  • HRSword-main/Drivers/hrwfpdrv.sys
    .exe windows x64

    75b756741d302d030ecb3afb6dfdbdd9


    Code Sign

    Headers

    Imports

    Sections

  • HRSword-main/Drivers/hrwfpdrv_win10.sys
    .exe windows x64

    75b756741d302d030ecb3afb6dfdbdd9


    Code Sign

    Headers

    Imports

    Sections

  • HRSword-main/Drivers/sysdiag.sys
    .exe windows x64

    67cf18ed0cd81a575a82621857c2273f


    Code Sign

    Headers

    Imports

    Sections

  • HRSword-main/Drivers/sysdiag_win10.sys
    .exe windows x64

    67cf18ed0cd81a575a82621857c2273f


    Code Sign

    Headers

    Imports

    Sections

  • HRSword-main/Drivers/usysdiag.exe
    .exe windows x64

    1d246b73a1363f9de56051128dbcc5a0


    Code Sign

    Headers

    Imports

    Sections

  • HRSword-main/DuiLib.dll
    .dll windows x86

    82da7ee900cc7c39439b01ac373ff6b6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HRSword-main/HRSword.exe
    .exe windows x86

    769aff5f42a70c75e4a0aec86c46b1eb


    Code Sign

    Headers

    Imports

    Sections

  • HRSword-main/README.md
  • HRSword-main/behavior.dll
    .dll windows x86

    bbca16973f969f1fccaa25e8d44d7379


    Code Sign

    Headers

    Imports

    Sections

  • HRSword-main/daemon.dll
    .dll windows x86

    a3eb582553bd15892a18d9f89e3b2a86


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HRSword-main/libcodecs.dll
    .dll windows x86

    957624f9857252eeec3df6f94b97f9dc


    Code Sign

    Headers

    Imports

    Sections

  • HRSword-main/libxsse.dll
    .dll windows x86

    0f4b2d353d7984c0cfe8d5b9890be683


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HRSword-main/selfprot.dll
    .dll windows x86

    8d364dda4fee79a14338baa56355d230


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HRSword-main/uactmon.dll
    .dll windows x86

    86e7eec1e15c4d784791412b483ec56e


    Code Sign

    Headers

    Imports

    Sections

  • HRSword-main/usysdiag.dll
    .dll windows x86

    e17404561494c850a5ac4b53ea852723


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • HRSword-main/win10初始化.bat
  • HRSword-main/win7初始化.bat