Overview

overview

8

Static

static

8

传奇通�...om.url

windows7-x64

1

传奇通�...om.url

windows10-2004-x64

1

传奇通�...om.url

windows7-x64

1

传奇通�...om.url

windows10-2004-x64

1

传奇通�...om.url

windows7-x64

1

传奇通�...om.url

windows10-2004-x64

1

传奇通�....0.exe

windows7-x64

8

传奇通�....0.exe

windows10-2004-x64

8

传奇通�...om.url

windows7-x64

1

传奇通�...om.url

windows10-2004-x64

1

传奇通�...om.url

windows7-x64

1

传奇通�...om.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57620f62c4373fed074b06b7bd63796d4981b0622ee70c01ffd931d7c227ae65

  • Size

    224KB

  • MD5

    18e9d7b38a50b335cfb14b16a5d5a2f6

  • SHA1

    2cccb651b8a6277ed0dfe56a6e59a5dce12b2976

  • SHA256

    57620f62c4373fed074b06b7bd63796d4981b0622ee70c01ffd931d7c227ae65

  • SHA512

    1b9f461d3b1b0ed7caacad9c501756eea6610ee6ca69ba660a6332c356f330aaab6248fc2f3b7a87861ae5410e9ee1eb9feb9e96e5443ca257243fc2771ac249

  • SSDEEP

    6144:8HIwgpws71uZLTleENgDKBxnzOvbGpL1uS8+DxdN:8HIzpv1OxeEuDKBxn4uLU0L

Score
8/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect

Files

  • 57620f62c4373fed074b06b7bd63796d4981b0622ee70c01ffd931d7c227ae65
    .rar
  • 传奇通用变速器7.0/一刀插件官网：55fz.com.url
    .url
  • 传奇通用变速器7.0/万千辅助官网：wanqianfz.com.url
    .url
  • 传奇通用变速器7.0/传奇守护者官网：184pk.com.url
    .url
  • 传奇通用变速器7.0/传奇通用变速器7.0.exe
    .exe windows x86

    bb6967b4b01e1dfdc4070e67da00e6e4


    Headers

    Imports

    Sections

  • 传奇通用变速器7.0/使用方法.txt
  • 传奇通用变速器7.0/变速器官网：yuzhoupk.com.url
    .url
  • 传奇通用变速器7.0/简单挂官网：s1904.com.url
    .url
  • 传奇通用变速器7.0/请关闭杀毒软件，方可正常运行辅助.txt