General
-
Target
2bc6db1cf2247108fa7636220aff73ae97d62902326f6571f40210257d386f30
-
Size
481KB
-
Sample
221125-2c1c2abe23
-
MD5
0ffbc05024dbc5e5697e04f07a56da54
-
SHA1
0cf5e0669e5e52f4ebb4d90a9b49e49f0e9a3803
-
SHA256
2bc6db1cf2247108fa7636220aff73ae97d62902326f6571f40210257d386f30
-
SHA512
5b0b191f9685fb08623586d695d340f3be52253161a7f728d27664b90e4221b49ba7156a923616a89d8a799c83c92afc1c0b277d94f787c66d275d54ad15923b
-
SSDEEP
12288:SeeGjRiXTeqpSZc86xD5wak7ALuI51oNuZcJ8ece1vtaxi:ScYTBSZz6xD5nQALjcwB+lz
Static task
static1
Behavioral task
behavioral1
Sample
yichun_wmn.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
yichun_wmn.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
yichun_wmn.exe
-
Size
1.2MB
-
MD5
6c1c3e867357b1fc3f79071ed029f133
-
SHA1
8ed4718de573dc38633195b584d256cb059f47ce
-
SHA256
7f252e395d7fa74a869f6f21e414a195135cfb930bfb15fcb48c8575053767e3
-
SHA512
93a9e34ada8d010a1c43812f22c2e5dbf4761bc08411e64e173502b43be00d0ca80974ee075ea0deeb9707d58365a3631875f263490612ee5e0929abf9498993
-
SSDEEP
24576:F2B3IFaREHU1LNJ71SuA1zW0jhFG4Q/+3/tliFHEVA3fRrgnG3J:F2iU1LNKXXjCm3/OFGufMm
Score9/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-