Overview

overview

8

Static

static

8

传奇通�...om.url

windows7-x64

1

传奇通�...om.url

windows10-2004-x64

1

传奇通�...om.url

windows7-x64

1

传奇通�...om.url

windows10-2004-x64

1

传奇通�...om.url

windows7-x64

1

传奇通�...om.url

windows10-2004-x64

1

传奇通�....0.exe

windows7-x64

8

传奇通�....0.exe

windows10-2004-x64

8

传奇通�...om.url

windows7-x64

1

传奇通�...om.url

windows10-2004-x64

1

传奇通�...om.url

windows7-x64

1

传奇通�...om.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57620f62c4373fed074b06b7bd63796d4981b0622ee70c01ffd931d7c227ae65

  • Size

    224KB

  • Sample

    221127-ek648acc6x

  • MD5

    18e9d7b38a50b335cfb14b16a5d5a2f6

  • SHA1

    2cccb651b8a6277ed0dfe56a6e59a5dce12b2976

  • SHA256

    57620f62c4373fed074b06b7bd63796d4981b0622ee70c01ffd931d7c227ae65

  • SHA512

    1b9f461d3b1b0ed7caacad9c501756eea6610ee6ca69ba660a6332c356f330aaab6248fc2f3b7a87861ae5410e9ee1eb9feb9e96e5443ca257243fc2771ac249

  • SSDEEP

    6144:8HIwgpws71uZLTleENgDKBxnzOvbGpL1uS8+DxdN:8HIzpv1OxeEuDKBxn4uLU0L

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      传奇通用变速器7.0/一刀插件官网：55fz.com.url

    • Size

      155B

    • MD5

      af79ca71e22272c93f46348fbbedb5d7

    • SHA1

      4a755d7ea25226bf28ac1dbd544624c649197910

    • SHA256

      e321d0b805e2d829276fa4bb0df76fbc3b31f138e15576a0180a0c83169d3ef3

    • SHA512

      e676f12dd8e8ec3e36aebb306334a55deb7588042e3ae9d0c09ff517de73e31edd87acea30d2e2da832e731337a558adbc007dffcc1a1272c749f38d55fd8ffc

    Score
    1/10
    behavioral1behavioral2

    • Target

      传奇通用变速器7.0/万千辅助官网：wanqianfz.com.url

    • Size

      376B

    • MD5

      df2adb9ef4debba63965e95e0ef0a834

    • SHA1

      fde4ad693ef1db31336aedc94c9f645c386a90f1

    • SHA256

      6997b061e8a0938938b14e061e665f9fa4aa06c8c6da07c2c1485ea9829c20e0

    • SHA512

      5d1844edbca873934c845e19a733023facd543055f89212efc8b262637995dcae97fa7916eeaf30e4659365c4b28e916278099a7f6a5c3d383943662c76d1647

    Score
    1/10
    behavioral3behavioral4

    • Target

      传奇通用变速器7.0/传奇守护者官网：184pk.com.url

    • Size

      155B

    • MD5

      4a22dddd8446183c50f3aa29692e25e9

    • SHA1

      643615b1ff943a7474195be641882adc6f6ff211

    • SHA256

      3d32336a6e23e0567beca4e18395aac12d78c3c7578d59791da98633c48fb6f8

    • SHA512

      4be750fb649ae52b735dd3245273f858ba637a96dbcfe8263927a0429d9e572cb1e1f227e7ca3544458901b98a3289e11ac53a2462d7e6082020caaba23424ec

    Score
    1/10
    behavioral5behavioral6

    • Target

      传奇通用变速器7.0/传奇通用变速器7.0.exe

    • Size

      244KB

    • MD5

      6f92c15bf863fa0e17a4e35bd4fd51fa

    • SHA1

      6ca6a62a24bdaf0447fb9ae27f49253226cf9df8

    • SHA256

      09342e5b817da7d66f0d72a30f05ac70a40fd513ecfedc4ddae629f08db13e9e

    • SHA512

      fbb6db3add179bfe27d72fcefcfeeb05643e764be6c8064b7c99fd032ab6b2093a774550fb3ada2160fab2092b8e8b0766880a610548924383fc0a714a1faaba

    • SSDEEP

      6144:fo6ZAZuWvOFBPbcLb4aVWKEyWLxkoXPVrFayCov9oTkN:g8WwA4ItJWlkOPVFSoVooN

    Score
    8/10
    vmprotect

    • Drops file in Drivers directory

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    behavioral7behavioral8

    • Target

      传奇通用变速器7.0/变速器官网：yuzhoupk.com.url

    • Size

      296B

    • MD5

      fb910ad7cbd0f9d1e611a47cac0372c0

    • SHA1

      3aedb64dba22eeedbd944eecaa14ef57462fb980

    • SHA256

      0da5e9194e17f17883ffbccf22cf99befd402c53e318393c78e932b0694cf349

    • SHA512

      dac700887a9d62583a452315c007b533177158e26effc4014b78d19ac884bb04b2bd9fd1f17368b96fb0a10bed3b01724d3f84bf5be01c3afd9fc0d70308191b

    Score
    1/10
    behavioral10behavioral9

    • Target

      传奇通用变速器7.0/简单挂官网：s1904.com.url

    • Size

      155B

    • MD5

      0c1c35771fa1a0fe96a485cee91ff407

    • SHA1

      1e41897cec67228a62fb861005bc0a5077b581f9

    • SHA256

      ddd4f69a510db4e6c2ec7340ee90845ceade8ea41fde5e7ad7a2a407ca002ee1

    • SHA512

      df3154f2144dc38cee377b7eeb5174cf9ba87e7003c201006d19f2202e6d763ff0e81d09cb6f50c1675ae0daaceea9766aabd99fa000ab83d559ce0fa7685def

    Score
    1/10
    behavioral11behavioral12

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks