Overview

overview

9

Static

static

9

SkinH_EL.dll

windows7-x64

8

SkinH_EL.dll

windows10-2004-x64

8

cs.exe

windows7-x64

8

cs.exe

windows10-2004-x64

8

csbh.exe

windows7-x64

8

csbh.exe

windows10-2004-x64

8

创世兵�....0.exe

windows7-x64

1

创世兵�....0.exe

windows10-2004-x64

1

当下软件园.url

windows7-x64

1

当下软件园.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53a320a466cd1e81cdf0cbba1c80ad325dace5c788afa7efb178d1f803b467f6

  • Size

    1.3MB

  • MD5

    893c386dc1069e3400da4031ef7f9e67

  • SHA1

    ee5067c56de0940a905be434d64d0660eba6e8e9

  • SHA256

    53a320a466cd1e81cdf0cbba1c80ad325dace5c788afa7efb178d1f803b467f6

  • SHA512

    b2c738ba4114c67dfe6e29d49afc8c9e5c7a0ba40f30e7a558b4ee862e0bff569ff848184e2fde64bd03e5c37b2f0b21c62ef26d76284b8e483d2824681c3ce8

  • SSDEEP

    24576:yI5FbCoQvFaM6wGNPjVaaM6mXCJlLCYijE87dk1E6CEVv389:nWdkjbjWX+UeikTv389

Score
9/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 53a320a466cd1e81cdf0cbba1c80ad325dace5c788afa7efb178d1f803b467f6
    .rar
  • SkinH_EL.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • cs.fmr
    .exe windows x86

    8edf77107059cc629de0eff30cb6048b


    Headers

    Imports

    Sections

  • csbh.fmr
    .exe windows x86

    8edf77107059cc629de0eff30cb6048b


    Headers

    Imports

    Sections

  • 使用说明.txt
  • 创世兵魂小黑辅助V8.0.exe
    .exe windows x86

    e9d48efaaf8b6302c890e5234b3e7638


    Headers

    Imports

    Sections

  • 当下软件园.url
    .url