Overview

overview

9

Static

static

9

tianmwwfz_...EL.dll

windows7-x64

8

tianmwwfz_...EL.dll

windows10-2004-x64

8

tianmwwfz_....4.exe

windows7-x64

8

tianmwwfz_....4.exe

windows10-2004-x64

8

tianmwwfz_...��.url

windows7-x64

1

tianmwwfz_...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    9513836c619f659865d3d9c04c78da22a38b4e2afc659f2e434584eda74ed3ae

  • Size

    805KB

  • MD5

    a98ebdff08f451886fbc2b0252728f7d

  • SHA1

    9f9a7998ccf3a202f596e516cc11001b2fe8dd51

  • SHA256

    9513836c619f659865d3d9c04c78da22a38b4e2afc659f2e434584eda74ed3ae

  • SHA512

    2bf74e5c7a7654eb0e2d446d1fe99083de3b8a896571254a8f95b90c013f3eb09a46023b3b9aeae13eb19eb8a8af2ee2f8ed75214ae2392b3dad10dda975dda0

  • SSDEEP

    12288:mn7eiXQw+dwJlgTti12PAa8a9aUu0f91oQ9IyJr6/4wcR/zElDJVKPuZ/i:mn74Gutg0A2f91oQlrKcR8DLVi

Score
9/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 9513836c619f659865d3d9c04c78da22a38b4e2afc659f2e434584eda74ed3ae
    .rar
  • tianmwwfz_veryhuo.com/SkinH_EL.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • tianmwwfz_veryhuo.com/天命歪歪辅助v1.4.exe
    .exe windows x86

    16259a691cd61a3b233ffc9012f96399


    Headers

    Imports

    Sections

  • tianmwwfz_veryhuo.com/数据库.edb
  • tianmwwfz_veryhuo.com/最火软件站.url
    .url
  • tianmwwfz_veryhuo.com/软件说明.txt