Overview

overview

8

Static

static

8

htrzolmrfz...��.url

windows7-x64

1

htrzolmrfz...��.url

windows10-2004-x64

1

htrzolmrfz...��.url

windows7-x64

1

htrzolmrfz...��.url

windows10-2004-x64

1

htrzolmrfz...��.bat

windows7-x64

1

htrzolmrfz...��.bat

windows10-2004-x64

6

htrzolmrfz...��.exe

windows7-x64

8

htrzolmrfz...��.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    e37d974aab0cd7a13b08b5cf6d7fca93155cacb1f84c1314413a77154ae08675

  • Size

    1.8MB

  • MD5

    eea5b1dc5235bc882d88043e902b4a15

  • SHA1

    7493a5d6aa7902fffa66e22f47ff12f43bc59e2a

  • SHA256

    e37d974aab0cd7a13b08b5cf6d7fca93155cacb1f84c1314413a77154ae08675

  • SHA512

    cdf8342e01d191e3caf3e06ecd89945651f34498de08bcc4c5ec5d114c0b30842e9c579f7fc62a7991c2c64a0cf002598415e2b9b59f13a80328f2645a666576

  • SSDEEP

    49152:d9Ql1O7fPxSuYDlK9eeJ49lcTRsrri6LjCI9nkRpz:dalQfPxSxDlf9wR0rBqIqn

Score
8/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect

Files

  • e37d974aab0cd7a13b08b5cf6d7fca93155cacb1f84c1314413a77154ae08675
    .zip
  • htrzolmrfz_gr/东坡下载说明.txt
  • htrzolmrfz_gr/更多软件下载.url
    .url
  • htrzolmrfz_gr/火影忍者OL鸣人辅助/介绍帮助.txt
  • htrzolmrfz_gr/火影忍者OL鸣人辅助/官网更新地址.url
    .url
  • htrzolmrfz_gr/火影忍者OL鸣人辅助/检测新版本.bat
  • htrzolmrfz_gr/火影忍者OL鸣人辅助/火影忍者OL鸣人辅助.exe
    .exe windows x86

    b4d61cae73f4923253587b1868a6f768


    Headers

    Imports

    Sections

  • htrzolmrfz_gr/火影忍者OL鸣人辅助/辅助截图.jpg
    .jpg