Overview
overview
3Static
static
使用帮助.url
windows7-x64
1使用帮助.url
windows10-2004-x64
1内存为r...��.exe
windows7-x64
1内存为r...��.exe
windows10-2004-x64
1内存为r...��.url
windows7-x64
1内存为r...��.url
windows10-2004-x64
1内存为r...��.exe
windows7-x64
1内存为r...��.exe
windows10-2004-x64
1内存为r...��.url
windows7-x64
1内存为r...��.url
windows10-2004-x64
1内存为r...��.exe
windows7-x64
3内存为r...��.exe
windows10-2004-x64
3内存为r...��.url
windows7-x64
1内存为r...��.url
windows10-2004-x64
1访问亮�...��.url
windows7-x64
1访问亮�...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
使用帮助.url
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
使用帮助.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
内存为read修复工具.exe
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
内存为read修复工具.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
内存为read修复工具/使用方法.url
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
内存为read修复工具/使用方法.url
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
内存为read修复工具/内存为read修复工具.exe
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
内存为read修复工具/内存为read修复工具.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
内存为read修复工具/注意事项.url
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
内存为read修复工具/注意事项.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
内存为read修复工具/解決內存不能為read的精品小軟件.exe
Resource
win7-20220901-en
Behavioral task
behavioral12
Sample
内存为read修复工具/解決內存不能為read的精品小軟件.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
内存为read修复工具/韶城.url
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
内存为read修复工具/韶城.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
访问亮亮博客.url
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
访问亮亮博客.url
Resource
win10v2004-20220812-en
General
-
Target
310f82cbfdd3b02d08be35c871e435cc5bb1959513956d9f11b25b025c5a9ab6
-
Size
184KB
-
MD5
e06ee24be10ebb5dad6607685884a8ee
-
SHA1
da9f9c58e111307fd7c5e9903c6ea6c9a324746c
-
SHA256
310f82cbfdd3b02d08be35c871e435cc5bb1959513956d9f11b25b025c5a9ab6
-
SHA512
90615ce30550566f215d13400b89c7c558526060da31cc3bf639835de3a41cfd1d00564a4eb6b66615da6ce49ec7ec25a73632e7b47a2d0d2ed209cf08083938
-
SSDEEP
3072:N46F3LyLjwDjL+X49NHSYv7Sx6BU02/lDVO8JTMIRNa79yXNr9qzlhN9V:NLyjwZHSYDS42/lDV/jaxy9olb
Malware Config
Signatures
Files
-
310f82cbfdd3b02d08be35c871e435cc5bb1959513956d9f11b25b025c5a9ab6.rar
-
使用帮助.url.url
-
内存为read修复工具.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 10KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
内存为read修复工具/使用方法.url.url
-
内存为read修复工具/内存为read修复工具.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 10KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
内存为read修复工具/注意事项.url.url
-
内存为read修复工具/解決內存不能為read的精品小軟件.EXE.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 10KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
内存为read修复工具/韶城.url.url
-
设置亮亮博客为首页.reg
-
访问亮亮博客.url.url