Overview

overview

9

Static

static

9

更多系�...�.html

windows7-x64

1

更多系�...�.html

windows10-2004-x64

1

q779596940_Setup.exe

windows7-x64

9

q779596940_Setup.exe

windows10-2004-x64

远程监�...em.dll

windows7-x64

3

远程监�...em.dll

windows10-2004-x64

3

远程监�...ma.exe

windows7-x64

3

远程监�...ma.exe

windows10-2004-x64

3

远程监�...ib.exe

windows7-x64

3

远程监�...ib.exe

windows10-2004-x64

3

远程监�...ip.exe

windows7-x64

1

远程监�...ip.exe

windows10-2004-x64

1

远程监控/dp1.dll

windows7-x64

3

远程监控/dp1.dll

windows10-2004-x64

3

远程监�...72.exe

windows7-x64

8

远程监�...72.exe

windows10-2004-x64

8

远程监�...ln.dll

windows7-x64

1

远程监�...ln.dll

windows10-2004-x64

1

远程监�...��.exe

windows7-x64

3

远程监�...��.exe

windows10-2004-x64

3

远程监�...��.exe

windows7-x64

1

远程监�...��.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14a3894cd6a6e321d3a07c5b7a2bd22cad174f55feef3b6b6e2279fc5ea66ee8

  • Size

    7.0MB

  • MD5

    6726cbe4e3327950bd213e39435e2ed8

  • SHA1

    f058f257b475b2f9bc33a0575eb3018fbd15c544

  • SHA256

    14a3894cd6a6e321d3a07c5b7a2bd22cad174f55feef3b6b6e2279fc5ea66ee8

  • SHA512

    33cb25e30dd7f636b4e8c0c24d037ea1e8b06cd83e8a299f08a690a52d238c21637511c6bf3ba9b6e05ed7c077c1e53d43182a9b820d3119787bdf21eaaff31d

  • SSDEEP

    196608:75ySsFJpY+hIRu+F/O3ZhUgUzmDUO5ySsRqk:7rsFs+h6LiwwYOrsRB

Score
9/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • NSIS installer 1 IoCs
    installer

Files

  • 14a3894cd6a6e321d3a07c5b7a2bd22cad174f55feef3b6b6e2279fc5ea66ee8
    .rar
  • 使用说明.txt
  • 更多系统软件下载.html
  • 远程监控/0.rar
    .rar
  • q779596940_Setup.exe
    .exe windows x86

    9165ea3e914e03bda3346f13edbd6ccd


    Headers

    Imports

    Sections

  • 远程监控/ICO/ACCESS.ico
  • 远程监控/ICO/BMP.ico
  • 远程监控/ICO/Excel.ico
  • 远程监控/ICO/Flash.ico
  • 远程监控/ICO/GIF.ico
  • 远程监控/ICO/IE6.ico
  • 远程监控/ICO/IE7.ico
  • 远程监控/ICO/JPG.ico
  • 远程监控/ICO/MSN.ico
  • 远程监控/ICO/PPT.ico
  • 远程监控/ICO/Print.ico
  • 远程监控/ICO/QQ.ico
  • 远程监控/ICO/Setup.ico
  • 远程监控/ICO/TXT.ico
  • 远程监控/ICO/Update.ico
  • 远程监控/ICO/VISIO.ico
  • 远程监控/ICO/WINWORD.ico
  • 远程监控/ICO/WinRAR.ico
  • 远程监控/ICO/WmpFile.ico
  • 远程监控/ICO/firefox.ico
  • 远程监控/ICO/psd.ICO
  • 远程监控/ICO/realplay.ico
  • 远程监控/ICO/rm.ICO
  • 远程监控/ICO/wmplayer.ico
  • 远程监控/ICO/公文包.ico
  • 远程监控/ICO/回收站.ico
  • 远程监控/ICO/我的电脑.ico
  • 远程监控/ICO/控制面板.ico
  • 远程监控/ICO/文件夹.ico
  • 远程监控/ICO/资源管理器.ico
  • 远程监控/IP.dat
  • 远程监控/LZMA/Plugins/System.dll
    .dll windows x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • 远程监控/LZMA/Stubs/lzma
    .exe windows x86

    9b89b73a2bd2f3c9338530bbd4a212f0


    Headers

    Imports

    Sections

  • 远程监控/LZMA/Stubs/uninst
  • 远程监控/LZMA/Stubs/zlib
    .exe windows x86

    9b89b73a2bd2f3c9338530bbd4a212f0


    Headers

    Imports

    Sections

  • 远程监控/LZMA/zip.exe
    .exe windows x86

    43e286b8fd04cac7f3d97deef6365ae9


    Headers

    Imports

    Sections

  • 远程监控/LZMA/敬告.txt
  • 远程监控/Snd/001.wav
  • 远程监控/Snd/002.wav
  • 远程监控/Snd/003.wav
  • 远程监控/default.ico
  • 远程监控/dp1.fne
    .dll windows x86

    a198616942b79e67d7da4241ca14ebce


    Headers

    Imports

    Exports

    Sections

  • 远程监控/hbf72.exe
    .exe windows x86


    Headers

    Sections

  • 远程监控/inst.ini
  • 远程监控/krnln.fnr
    .dll windows x86


    Headers

    Exports

    Sections

  • 远程监控/link.dat
  • 远程监控/name.dat
  • 远程监控/q779596940_Setup(1).rar
    .rar
  • 远程监控/skin/zhuque.bskn
  • 远程监控/主控端备份.bak
    .exe windows x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • 远程监控/使用说明.txt
  • 远程监控/木马配置1.jpg
    .jpg
  • 远程监控/被控端.备份.rar
    .rar
  • 远程监控/配置木马-2高级选项.jpg.jpg
    .jpg
  • 远程监控/配置木马-3其它选项.jpg.jpg
    .jpg
  • 远程监控/配置木马-3其它选项2.jpg.jpg
    .jpg
  • 远程监控/附_文件捆绑器.exe
    .exe windows x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections