Overview

overview

9

Static

static

9

Plugins/Alarm.dll

windows7-x64

8

Plugins/Alarm.dll

windows10-2004-x64

8

Plugins/Merge.dll

windows7-x64

8

Plugins/Merge.dll

windows10-2004-x64

8

QiDian.exe

windows7-x64

9

QiDian.exe

windows10-2004-x64

1

Readme-说明.htm

windows7-x64

1

Readme-说明.htm

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    7e89bcbc7e676876fc9a03d50c65a65ecf0e10b45c0cca3f5a7f8178edb7fc0f

  • Size

    194KB

  • MD5

    ab7a3fb397108b650a44cbc0ab907118

  • SHA1

    fbdf67bad323be5a1b0cc3614c442469d4404b5e

  • SHA256

    7e89bcbc7e676876fc9a03d50c65a65ecf0e10b45c0cca3f5a7f8178edb7fc0f

  • SHA512

    0ab6cea930d12d831154c39aa88c0fe4ac221e5a3ee0488243cdad90b861d42a607e3d7961d65e1253966f647a99756f9d81dc5d0d298e2cf636845e342d128e

  • SSDEEP

    6144:kFRIXWX3iMcso4OIpXNFkrYwzsnvKYtapDgk:+RlHiMcS4Yw8XaFgk

Score
9/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 7e89bcbc7e676876fc9a03d50c65a65ecf0e10b45c0cca3f5a7f8178edb7fc0f
    .rar
  • Plugins/Alarm.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • Plugins/Merge.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • QiDian.exe
    .exe windows x86


    Headers

    Sections

  • QiDian.txt
  • Readme-说明.htm
    .html