Overview

overview

9

Static

static

9

解压桌�...Gc.exe

windows7-x64

8

解压桌�...Gc.exe

windows10-2004-x64

8

解压桌�...Gc.exe

windows7-x64

8

解压桌�...Gc.exe

windows10-2004-x64

8

解压桌�...EL.dll

windows7-x64

8

解压桌�...EL.dll

windows10-2004-x64

8

解压桌�...��.dll

windows7-x64

1

解压桌�...��.dll

windows10-2004-x64

1

解压桌�...FI.exe

windows7-x64

8

解压桌�...FI.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    507f7c8f26eec818cb3677891b189cd1561aff5e8ec39674d278f02655badd4c

  • Size

    2.1MB

  • MD5

    831dd704dc53e058c45dd036f6975bc9

  • SHA1

    2c3b38e4afd1298cddb8e3fb36d0d00d8987d5f1

  • SHA256

    507f7c8f26eec818cb3677891b189cd1561aff5e8ec39674d278f02655badd4c

  • SHA512

    923c7341b9234a4a33581d74c7f561b169edb43835e49b4304c2a11328f844aa01c6d7423bbde7c6302f732e57a07bc847dd5769e888b033b55ce4807574dbce

  • SSDEEP

    49152:0OTgL3D5CQOKIYw1gf6OXWtbukAebenct46O2:0PAQLcm6Ocbu9cqR2

Score
9/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 507f7c8f26eec818cb3677891b189cd1561aff5e8ec39674d278f02655badd4c
    .7z
  • 解压桌面再运行/data/IgnoreGc.dll
    .exe windows x86

    a2d60c4927168d4888f499bb0965bb9d


    Headers

    Imports

    Sections

  • 解压桌面再运行/data/IgnoreGc.exe
    .exe windows x86

    a2d60c4927168d4888f499bb0965bb9d


    Headers

    Imports

    Sections

  • 解压桌面再运行/data/SkinH_EL.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • 解压桌面再运行/data/大壮.dll
    .dll windows x86

    c92d1559d1e105113857a14029426d8c


    Headers

    Imports

    Exports

    Sections

  • 解压桌面再运行/提示.txt
  • 解压桌面再运行/易幽无限背包 by：易幽团队-WIFI.exe
    .exe windows x86


    Headers

    Sections