Overview

overview

8

Static

static

ERawSock.dll

windows7-x64

1

ERawSock.dll

windows10-2004-x64

1

EThread.dll

windows7-x64

1

EThread.dll

windows10-2004-x64

1

UUWiseHelper.dll

windows7-x64

1

UUWiseHelper.dll

windows10-2004-x64

3

ZMApi.dll

windows7-x64

1

ZMApi.dll

windows10-2004-x64

1

ZMApiUpdate.exe

windows7-x64

1

ZMApiUpdate.exe

windows10-2004-x64

1

const.dll

windows7-x64

1

const.dll

windows10-2004-x64

1

dp1.dll

windows7-x64

3

dp1.dll

windows10-2004-x64

3

eAPI.dll

windows7-x64

1

eAPI.dll

windows10-2004-x64

1

iext.dll

windows7-x64

1

iext.dll

windows10-2004-x64

1

internet.dll

windows7-x64

1

internet.dll

windows10-2004-x64

1

krnln.dll

windows7-x64

1

krnln.dll

windows10-2004-x64

1

script.dll

windows7-x64

1

script.dll

windows10-2004-x64

1

shell.dll

windows7-x64

1

shell.dll

windows10-2004-x64

1

spec.dll

windows7-x64

1

spec.dll

windows10-2004-x64

1

ԵQQ...��.exe

windows7-x64

8

ԵQQ...��.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b59997f4efdf54a64dbbcb60c98d02dde50772b39552f9c7bd9c2fa809887b3

  • Size

    2.5MB

  • MD5

    273ea77cec1653c666752ad50ee3a75a

  • SHA1

    17d4a00bfe37c5f7dd80a1c085166b485f58458c

  • SHA256

    7b59997f4efdf54a64dbbcb60c98d02dde50772b39552f9c7bd9c2fa809887b3

  • SHA512

    b71eca1d584cb0525df008e3cf26dee8a64ff3e548dbbc216a400f3e9aece5976b75ee3a81a57dc3c06d9a308efef3ba4835f1c540f7146ffe98eff473ceaac6

  • SSDEEP

    49152:1kUwVwJK4QaTrWcgOIIr9EEVH+OzWp5ZsoSeDeoye7RuGBonLMdHY1Y:yUtJdGcgO/yEVpypXS8LuF4HY1Y

Score
N/A

Malware Config

Signatures

Files

  • 7b59997f4efdf54a64dbbcb60c98d02dde50772b39552f9c7bd9c2fa809887b3
    .zip
  • ERawSock.fne
    .dll windows x86

    81569d4274f412a69d3eecc99c9699f6


    Headers

    Imports

    Exports

    Sections

  • EThread.fne
    .dll windows x86

    63cbf8bd20c1290cfab1ed83b71ea939


    Headers

    Imports

    Exports

    Sections

  • UUWiseHelper.dll
    .dll windows x86

    954804ebb4122dc5322f83866f944e03


    Headers

    Imports

    Exports

    Sections

  • ZMApi.dll
    .dll regsvr32 windows x86

    2602dd552bd947a775daabdea0765381


    Headers

    Imports

    Exports

    Sections

  • ZMApi.ini
  • ZMApiUpdate.exe
    .exe windows x86

    59cfc95720caffe9590634684a305ed2


    Headers

    Imports

    Sections

  • ZMConnect.ini
  • config.dat
  • const.fne
    .dll windows x86

    441e059fd023ec190521c7f9487ceca6


    Headers

    Imports

    Exports

    Sections

  • data/LY/ALCATEL SpeedTouch511e.ini
  • data/LY/ALPHA A8.ini
  • data/LY/ALPHA AFW-GR55 mini.ini
  • data/LY/ALPHA K3.ini
  • data/LY/ALPHA V4.ini
  • data/LY/ALPHA VCE.ini
  • data/LY/ASUS RX3041X.ini
  • data/LY/ASUS WL530g 2.ini
  • data/LY/ASUS WL530g.ini
  • data/LY/AboveCable ACRT2010-11.ini
  • data/LY/Alpha GR50.ini
  • data/LY/Aolynk BR104.ini
  • data/LY/Boc R460.ini
  • data/LY/D-Link DI-504.ini
  • data/LY/D-Link DI-524.ini
  • data/LY/D-Link DI-524M.ini
  • data/LY/D-Link DI-604+.ini
  • data/LY/D-Link DI-604.ini
  • data/LY/D-Link DI-614+.ini
  • data/LY/D-Link DI-624+A.ini
  • data/LY/D-Link DI-624.ini
  • data/LY/D-Link DI-808HV.ini
  • data/LY/D-Link DIR-100.ini
  • data/LY/D-Link DIR-300.ini
  • data/LY/D-Link DIR-600.ini
  • data/LY/D-Link DIR-615 A1 1.10.ini
  • data/LY/D-Link DIR-615.ini
  • data/LY/FAST FR40.ini
  • data/LY/FAST FR402.ini
  • data/LY/HL-RT700.ini
  • data/LY/Hi-Spider Hotel_V3.ini
  • data/LY/HuaWei 3COM BR104.ini
  • data/LY/HuaWei 3COM BR204+.ini
  • data/LY/HuaWei HG520.ini
  • data/LY/HuaWei WBR204G+.ini
  • data/LY/HuaWei WBR204G.ini
  • data/LY/IP-Com 11N.ini
  • data/LY/IP-Com Soho 2.ini
  • data/LY/IP-Com Soho 3.ini
  • data/LY/IP-Com Soho.ini
  • data/LY/IPTime G100R.ini
  • data/LY/IPTime N300R.ini
  • data/LY/KINGNET 3.1.ini
  • data/LY/KINGNET 3.2.ini
  • data/LY/KINGNET KN-S1060.ini
  • data/LY/KINGNET KN-S10602.ini
  • data/LY/KINGNET KN-S1060T.ini
  • data/LY/KINGNET KN-WR710H.ini
  • data/LY/LINKSYS WRT54G.ini
  • data/LY/LINKSYS WRT54GC.ini
  • data/LY/LinkSYS 2.00.20.ini
  • data/LY/LinkSYS BEFSR41.ini
  • data/LY/LinkSYS BEFW11S4.ini
  • data/LY/LinkSYS WRK54G(2).ini
  • data/LY/LinkSYS WRK54G.ini
  • data/LY/LinkSYS WRV200.ini
  • data/LY/Mercury MW54R.ini
  • data/LY/Mercury Soho MR804(2).ini
  • data/LY/Mercury Soho MR804.ini
  • data/LY/Motorola G.ini
  • data/LY/NetCore 2105+NR.ini
  • data/LY/NetCore 2305NR.ini
  • data/LY/NetCore 2505+NR.ini
  • data/LY/NetCore 2805NR.ini
  • data/LY/NetCore 54M2.ini
  • data/LY/NetCore 605GR.ini
  • data/LY/NetCore NR+205.ini
  • data/LY/NetCore NW715P.ini
  • data/LY/NetShare R-1200.ini
  • data/LY/NetShare R-1800.ini
  • data/LY/NetShare V1.005.ini
  • data/LY/Netgear WGR614.ini
  • data/LY/SMC SMC7004VBR.ini
  • data/LY/TP-LINK TL-WR841N.ini
  • data/LY/TP-Link 402M.ini
  • data/LY/TP-Link R4148.ini
  • data/LY/TP-Link TD-8810.ini
  • data/LY/TP-Link TD-8820.ini
  • data/LY/TP-Link TL-R402M.ini
  • data/LY/TP-Link TL-R410.ini
  • data/LY/TP-Link TL-R460.ini
  • data/LY/TP-Link TL-R860 860M.ini
  • data/LY/TP-Link TL-R860+.ini
  • data/LY/TP-Link TL-WR340G V5.ini
  • data/LY/TP-Link TL-WR340G.ini
  • data/LY/TP-Link TL-WR641G 642G.ini
  • data/LY/TP-Link TL-WR740N.ini
  • data/LY/TP-Link TL-WR941N TL-WR942N.ini
  • data/LY/Tenda NAT Router.ini
  • data/LY/Tenda R01-029.ini
  • data/LY/Tenda Soho(2).ini
  • data/LY/Tenda Soho.ini
  • data/LY/Tenda TEI168SK.ini
  • data/LY/Tenda TEI402.ini
  • data/LY/Tenda TEI402M.ini
  • data/LY/Tenda TEI480T+.ini
  • data/LY/Tenda TEI6606.ini
  • data/LY/Tenda TEI6608.ini
  • data/LY/Tenda TEI6608S 2.ini
  • data/LY/Tenda TEI6608S.ini
  • data/LY/Tenda TEI6611S.ini
  • data/LY/Tenda W311R.ini
  • data/LY/Tenda W541R.ini
  • data/LY/UCOM URS-983(2).ini
  • data/LY/UCOM URS-983.ini
  • data/LY/Vigor 2901.ini
  • data/LY/Wealnet R-2804P.ini
  • data/LY/Wealnet R-2808M.ini
  • dp1.fne
    .dll windows x86

    f4b4bca30df7e9c871bbc7c4aade35c8


    Headers

    Imports

    Exports

    Sections

  • eAPI.fne
    .dll windows x86

    c0c83ce3c8933e771c5efabbc1925abb


    Headers

    Imports

    Exports

    Sections

  • iext.fnr
    .dll windows x86

    08cfcb998694241d9af66cc88c7cb611


    Headers

    Imports

    Exports

    Sections

  • internet.fne
    .dll windows x86

    947a94c34d0476950a2cd72e8004382c


    Headers

    Imports

    Exports

    Sections

  • krnln.fnr
    .dll windows x86

    e4d774c71d9bddcd46bc26497b0dbe91


    Headers

    Imports

    Exports

    Sections

  • main.epk
  • qq汾صַ.txt
  • script.fne
    .dll windows x86

    71874d157b7e276e2c88d322a253db69


    Headers

    Imports

    Exports

    Sections

  • shell.fne
    .dll windows x86

    982b55eb63f51858ab5dbdb343dfc3f3


    Headers

    Imports

    Exports

    Sections

  • spec.fne
    .dll windows x86

    44912959aafe04feb6a5e77ff70ccd33


    Headers

    Imports

    Exports

    Sections

  • ˺ʾĵ.txt
  • Ƶ̳صַ.txt
  • ԵQQȺѰ.exe
    .exe windows x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections