Overview
overview
1Static
static
�...̨.url
windows7-x64
1�...̨.url
windows10-2004-x64
1�...��.url
windows7-x64
1�...��.url
windows10-2004-x64
1�...8).exe
windows7-x64
1�...8).exe
windows10-2004-x64
1�...��.exe
windows7-x64
1�...��.exe
windows10-2004-x64
1�...��.url
windows7-x64
1�...��.url
windows10-2004-x64
1�...̨.url
windows7-x64
1�...̨.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
24СʱԶۿƽ̨.url
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
24СʱԶۿƽ̨.url
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
.url
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
o17.4ͨ/汣䡿/wBox(2.0.14.0528).exe
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
o17.4ͨ/汣䡿/wBox(2.0.14.0528).exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
o17.4ͨ/17.4ͨ.exe
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
o17.4ͨ/17.4ͨ.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
o17.4ͨ/.url
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
o17.4ͨ/.url
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
o17.4ͨ/Զۿƽ̨.url
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
o17.4ͨ/Զۿƽ̨.url
Resource
win10v2004-20221111-en
General
-
Target
ce2331377018fd9a87425fa798470f2a8050f058d07b9f803f6f4ecf8bda174a
-
Size
11.3MB
-
MD5
2086b093528eb3655718d94701593ca0
-
SHA1
59ae246cb8fb81533dd9bd14a836f0ccdd7b3199
-
SHA256
ce2331377018fd9a87425fa798470f2a8050f058d07b9f803f6f4ecf8bda174a
-
SHA512
852d34f44f2869e31413a421185205adb14c1e884b90c4ec10536a3f5764f7bc16118596e961a98256561c25e4774e17da08c75bb04621165d77b09e2866c4f5
-
SSDEEP
196608:xOGuIOn8QDZ6dkZCSiQfcD5gjZjMdNCaFxOH804Bq9ZUjWmQ3xPR4NKMSbFLaub5:xOXIO8QD4iASiQ0DWjMdkaFxOH8sEj0h
Malware Config
Signatures
Files
-
ce2331377018fd9a87425fa798470f2a8050f058d07b9f803f6f4ecf8bda174a.zip
-
24СʱԶۿƽ̨.url.url
-
.url.url
-
o17.4ͨ/汣䡿/wBox(2.0.14.0528).exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.3MB
IMAGE_SCN_MEM_READ
.data Size: 384KB - Virtual size: 384KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ
-
o17.4ͨ/ű/ʹûسǾ.TXT
-
o17.4ͨ/ű/ʹԪ.txt
-
o17.4ͨ/ű/ʹشʯԶ.TXT
-
o17.4ͨ/ű/ʹʯԶ.txt
-
o17.4ͨ/ű/ʹƷܹʯհ.txt
-
o17.4ͨ/ű/ʹƷշ.TXT
-
o17.4ͨ/ű/ʹˮ.TXT
-
o17.4ͨ/ű/ʹˮԶ.TXT
-
o17.4ͨ/ű/һʹʹˮ.TXT
-
o17.4ͨ/ű/һʹشʯ.TXT
-
o17.4ͨ/ű/һʹʯ.TXT
-
o17.4ͨ/ű/һ.TXT
-
o17.4ͨ/ű/(һ).TXT
-
o17.4ͨ/ű/ѭűս2.txt
-
o17.4ͨ/ű/ѭűս.txt
-
o17.4ͨ/ű/س(ڿ).txt
-
o17.4ͨ/ű/(ѭűһ)-ֱӶȡ.txt
-
o17.4ͨ/ű/(-þ߲).TXT
-
o17.4ͨ/ű/ģ__С.TXT
-
o17.4ͨ/ű/ģ__̹Ʒ.TXT
-
o17.4ͨ/ű/ģ_ģ_С.TXT
-
o17.4ͨ/ű/ģ_ģ_̹Ʒ.TXT
-
o17.4ͨ/ű/Խű.txt
-
o17.4ͨ/ű/ս1.TXT
-
o17.4ͨ/ű/.txt
-
o17.4ͨ/ű/֤װ.TXT
-
o17.4ͨ/ű/ģʽл.txt
-
o17.4ͨ/ű/Ԫ.txt
-
o17.4ͨ/ű/Ԫֿ .txt
-
o17.4ͨ/ű/ҩ.txt
-
o17.4ͨ/ű/Ա(һȫ).TXT
-
o17.4ͨ/ű/űս_չش.TXT
-
o17.4ͨ/ű/ͼű.TXT
-
o17.4ͨ/ű/ðģҩ.txt
-
o17.4ͨ/ű/շ.TXT
-
o17.4ͨ/ű/ԶȥͼűҪű.TXT
-
o17.4ͨ/ű/Ŵȫ(дűʱõ).txt
-
o17.4ͨ/ű/Ǵװ+շ.txt
-
o17.4ͨ/ű/ǻշ.TXT
-
o17.4ͨ/ű/ǿ.TXT
-
o17.4ͨ/ű/NPCҩƷ7һ.TXT
-
o17.4ͨ/ű/ȴװ+հ.txt
-
o17.4ͨ/ű/֤سǻհ.txt
-
o17.4ͨ/ű/֤հ.TXT
-
o17.4ͨ/ű/ƶ()ָ.txt
-
o17.4ͨ/ű/ƶ()ָ.txt
-
o17.4ͨ/ű/շһ.TXT
-
o17.4ͨ/ű/߲ͼ.TXT
-
o17.4ͨ/12.db
-
o17.4ͨ/17.4ͨ.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 22.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 77KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 383KB - Virtual size: 384KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8.9MB - Virtual size: 8.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
-
o17.4ͨ/.url.url
-
o17.4ͨ/Զۿƽ̨.url.url
-
˵.htm.html .js