Overview
overview
1Static
static
iis110monf...on.exe
windows7-x64
1iis110monf...on.exe
windows10-2004-x64
1iis110monf...rv.exe
windows7-x64
1iis110monf...rv.exe
windows10-2004-x64
1iis110monf...��.url
windows7-x64
1iis110monf...��.url
windows10-2004-x64
1iis110monf...��.htm
windows7-x64
1iis110monf...��.htm
windows10-2004-x64
1iis110monf...��.url
windows7-x64
1iis110monf...��.url
windows10-2004-x64
1iis110monf...��.url
windows7-x64
1iis110monf...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
iis110monfree/IIS监控器(系统监控)/iis110mon.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
iis110monfree/IIS监控器(系统监控)/iis110mon.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
iis110monfree/IIS监控器(系统监控)/iis110monserv.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
iis110monfree/IIS监控器(系统监控)/iis110monserv.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
iis110monfree/IIS监控器(系统监控)/上网不会中毒的超强浏览器!.url
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
iis110monfree/IIS监控器(系统监控)/上网不会中毒的超强浏览器!.url
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
iis110monfree/IIS监控器(系统监控)/必看说明.htm
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
iis110monfree/IIS监控器(系统监控)/必看说明.htm
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
iis110monfree/IIS监控器(系统监控)/比ACDSEE还强的图像软件!.url
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
iis110monfree/IIS监控器(系统监控)/比ACDSEE还强的图像软件!.url
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
iis110monfree/IIS监控器(系统监控)/河源下载站.url
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
iis110monfree/IIS监控器(系统监控)/河源下载站.url
Resource
win10v2004-20220901-en
General
-
Target
ee1cedc07a43f6015063491a29a0f09fa88b946dfa28f7e7bcf666a03d26b86d
-
Size
298KB
-
MD5
ff681b6f12dc5c62b845b918644e59cd
-
SHA1
b7280c01cd226c3d298f0e79dbad9f9a9cc5c42b
-
SHA256
ee1cedc07a43f6015063491a29a0f09fa88b946dfa28f7e7bcf666a03d26b86d
-
SHA512
4030cb72178eed835883c14ffdd5f406c30c6dc7c86a05b80052d939147dbb77f79b8effb892cf6d07f82ffa4f20d2c4085e376ef7d5e0996c57bd5dbc67d064
-
SSDEEP
6144:dGkzOH6iWbatCEQJ7UtfISIV4ranwDKDbZocqbEzHFXtD4A:s4Ee+QSIarNKHucLjH
Malware Config
Signatures
Files
-
ee1cedc07a43f6015063491a29a0f09fa88b946dfa28f7e7bcf666a03d26b86d.rar
-
iis110monfree/IIS监控器(系统监控)/config.ini
-
iis110monfree/IIS监控器(系统监控)/iis110mon.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 409KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 600B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
iis110monfree/IIS监控器(系统监控)/iis110monserv.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
iis110monfree/IIS监控器(系统监控)/iismonlog.mdb
-
iis110monfree/IIS监控器(系统监控)/iismonlogbak.mdb
-
iis110monfree/IIS监控器(系统监控)/上网不会中毒的超强浏览器!.URL.url
-
iis110monfree/IIS监控器(系统监控)/必看说明.htm
-
iis110monfree/IIS监控器(系统监控)/比ACDSEE还强的图像软件!.URL.url
-
iis110monfree/IIS监控器(系统监控)/河源下载站.url.url