Overview

overview

9

Static

static

9

Xy2tools_V...EL.dll

windows7-x64

8

Xy2tools_V...EL.dll

windows10-2004-x64

8

Xy2tools_V...վ.url

windows7-x64

1

Xy2tools_V...վ.url

windows10-2004-x64

1

Xy2tools_V...EL.dll

windows7-x64

8

Xy2tools_V...EL.dll

windows10-2004-x64

8

Xy2tools_V...ssx.js

windows7-x64

1

Xy2tools_V...ssx.js

windows10-2004-x64

1

Xy2tools_V...(1).js

windows7-x64

1

Xy2tools_V...(1).js

windows10-2004-x64

1

Xy2tools_V...s/c.js

windows7-x64

1

Xy2tools_V...s/c.js

windows10-2004-x64

1

Xy2tools_V...ick.js

windows7-x64

1

Xy2tools_V...ick.js

windows10-2004-x64

1

Xy2tools_V.../ga.js

windows7-x64

1

Xy2tools_V.../ga.js

windows10-2004-x64

1

Xy2tools_V...sa.htm

windows7-x64

1

Xy2tools_V...sa.htm

windows10-2004-x64

1

Xy2tools_V...1).gif

windows7-x64

1

Xy2tools_V...1).gif

windows10-2004-x64

1

Xy2tools_V...at.gif

windows7-x64

1

Xy2tools_V...at.gif

windows10-2004-x64

1

Xy2tools_V...(1).js

windows7-x64

1

Xy2tools_V...(1).js

windows10-2004-x64

1

Xy2tools_V...xy2.js

windows7-x64

1

Xy2tools_V...xy2.js

windows10-2004-x64

1

Xy2tools_V...bal.js

windows7-x64

1

Xy2tools_V...bal.js

windows10-2004-x64

1

Xy2tools_V...te.exe

windows7-x64

1

Xy2tools_V...te.exe

windows10-2004-x64

1

Xy2tools_V...ls.exe

windows7-x64

8

Xy2tools_V...ls.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eeb062e6893526dbf871b73aaf2ab1ac24003001f82a4444a31a4055d7cc2368

  • Size

    2.2MB

  • MD5

    6311a11a92a11882c9f782a30dc33e10

  • SHA1

    8176e48191ae1d33c9687dd0af702458135e78bd

  • SHA256

    eeb062e6893526dbf871b73aaf2ab1ac24003001f82a4444a31a4055d7cc2368

  • SHA512

    4d1c19c5368d9928e657576d1f95278f1105604fbc083e2f38d4b6ac879f9ddeb9eedb755b5102af907c0d7192faee4ddaaf9f000e2c1241efc22a299ab7765a

  • SSDEEP

    49152:a7u7GrBWQkmFXZNR0KGKkKtf5zUBoPwDiT0lmv:aC6rBWQkmtZNqK9ruBoPGc0lmv

Score
9/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • eeb062e6893526dbf871b73aaf2ab1ac24003001f82a4444a31a4055d7cc2368
    .zip
  • Xy2tools_V1.020/Ini/SkinH_EL.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • Xy2tools_V1.020/Ini/bb.yzz
  • Xy2tools_V1.020/Ini/x.ini
  • Xy2tools_V1.020/Ini/xy2.yzz
  • Xy2tools_V1.020/Ini/强法属性.txt
  • Xy2tools_V1.020/Ini/抗性属性.txt
  • Xy2tools_V1.020/Ini/物理属性.txt
  • Xy2tools_V1.020/Ini/配置.ini
  • Xy2tools_V1.020/Ini/题库.txt
  • Xy2tools_V1.020/JZ5Uɫվ.url
    .url
  • Xy2tools_V1.020/SkinH_EL.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • Xy2tools_V1.020/jsyc/jssx.htm
    .js
  • Xy2tools_V1.020/jsyc/jssx_files/c(1).php
    .js
  • Xy2tools_V1.020/jsyc/jssx_files/c.php
    .js
  • Xy2tools_V1.020/jsyc/jssx_files/click.aspx
    .js
  • Xy2tools_V1.020/jsyc/jssx_files/count1.gif
    .gif
  • Xy2tools_V1.020/jsyc/jssx_files/ga.js
    .js
  • Xy2tools_V1.020/jsyc/jssx_files/sa.htm
  • Xy2tools_V1.020/jsyc/jssx_files/stat(1).htm
    .gif
  • Xy2tools_V1.020/jsyc/jssx_files/stat.htm
    .gif
  • Xy2tools_V1.020/jsyc/jssx_files/xy2(1).js
    .js
  • Xy2tools_V1.020/jsyc/jssx_files/xy2.js
    .js
  • Xy2tools_V1.020/jsyc/jssx_files/yzz_global.js
    .js
  • Xy2tools_V1.020/update.exe
    .exe windows x86

    b3eaa50f19245245ad383b2e24a36bb6


    Headers

    Imports

    Sections

  • Xy2tools_V1.020/xy2tools.exe
    .exe windows x86

    acc76b963b6bb5ee0045ebe9ba49d33d


    Headers

    Imports

    Sections

  • Xy2tools_V1.020/ʹñض.url
    .url
  • Xy2tools_V1.020/软件说明.txt