General

  • Target

    71f38b7f6cc588a976aac9484a0f5620e963585d37c79a84d26675c540047025

  • Size

    1.6MB

  • MD5

    898840dee0935215d70be35c39ab068e

  • SHA1

    0c93d74c59523284f584328739179c338eb3ecc8

  • SHA256

    71f38b7f6cc588a976aac9484a0f5620e963585d37c79a84d26675c540047025

  • SHA512

    4234d5d4ea4db12e155e64c32d6feccdea2f4a26126b0c1a4809769611fca73bb0ee44c218ccd3b9150b4c6e4469f61f7f64478d2e641334f2d682ae9b7f8493

  • SSDEEP

    24576:/W3X9C7dKQyg6PSLLvYF+mX+aZ7Kj7ZidIQJQEU6fidiIT+Dyzn76ImkmNvj3g:/wX9C7gQyg9LLg5n82lJQEU6giITMN7g

Score
9/10

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

Files

  • 71f38b7f6cc588a976aac9484a0f5620e963585d37c79a84d26675c540047025
    .rar
  • 51新炫舞挂房V喊话器[免费]/Fujian/51ZK.txt
  • 51新炫舞挂房V喊话器[免费]/dm.dll
    .dll regsvr32 windows x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows x86


    Headers

    Sections

  • 51新炫舞挂房V喊话器[免费]/使用必读.url
    .url
  • 51新炫舞挂房V喊话器[免费]/使用说明.txt
  • 51新炫舞挂房V喊话器[免费]/挂房+喊话器[免费].exe
    .exe windows x86

    a8a3bcab3af63b6cfca834493f9ae68f


    Headers

    Imports

    Sections

  • 51新炫舞挂房V喊话器[免费]/绿色先锋下载.url
    .url