Overview

overview

9

Static

static

9

创世兵�...EL.dll

windows7-x64

8

创世兵�...EL.dll

windows10-2004-x64

8

创世兵�...cs.exe

windows7-x64

8

创世兵�...cs.exe

windows10-2004-x64

8

创世兵�...bh.exe

windows7-x64

8

创世兵�...bh.exe

windows10-2004-x64

8

创世兵�....0.exe

windows7-x64

1

创世兵�....0.exe

windows10-2004-x64

1

创世兵�...��.url

windows7-x64

1

创世兵�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3907b7aa94c66d874a144c0934a1587854a0844b4b584b452379ba86ce32bd43

  • Size

    1.3MB

  • MD5

    bcc01e175bf357861553f9a6d7241237

  • SHA1

    bd44cc4ae04725c81c04fd3a54487de98895fdb5

  • SHA256

    3907b7aa94c66d874a144c0934a1587854a0844b4b584b452379ba86ce32bd43

  • SHA512

    4509824d5185545f2c1ac2e7221551f5abbb5e48dbb8bcc35f6c1308390d1c3d81866a756d919d64bb8afa6f23bdfd72cce69afb1641cc08744cc51a046d97a0

  • SSDEEP

    24576:ipOobhNESyDLDpQEvvIX2q7vTyjJ1/iTDtYFCGhVzYpqONpsns2jfq/m3Yho:ipOobhNTyvDuyvIXh01CJYF/hdaqO3Sr

Score
9/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 3907b7aa94c66d874a144c0934a1587854a0844b4b584b452379ba86ce32bd43
    .rar
  • 创世兵魂小黑辅助V8.0/SkinH_EL.dll
    .dll windows x86


    Headers

    Exports

    Sections

  • 创世兵魂小黑辅助V8.0/cs.fmr
    .exe windows x86

    8edf77107059cc629de0eff30cb6048b


    Headers

    Imports

    Sections

  • 创世兵魂小黑辅助V8.0/csbh.fmr
    .exe windows x86

    8edf77107059cc629de0eff30cb6048b


    Headers

    Imports

    Sections

  • 创世兵魂小黑辅助V8.0/下载说明.txt
  • 创世兵魂小黑辅助V8.0/创世兵魂小黑辅助V8.0.exe
    .exe windows x86

    e9d48efaaf8b6302c890e5234b3e7638


    Headers

    Imports

    Sections

  • 创世兵魂小黑辅助V8.0/数码资源网.url
    .url