Resubmissions

27-12-2022 11:46

221227-nxd4msaa6y 3

27-12-2022 02:34

221227-c2xwrshc8z 1

27-12-2022 02:30

221227-cy46nshc8x 1

27-12-2022 02:04

221227-chlpdshc7y 7

General

  • Target

    infected2022122701.zip

  • Size

    2.1MB

  • MD5

    08d80d86af9d0c6992e39e8b34d765cc

  • SHA1

    2d42839bc559c4ebb3d85e7f5a64f2c0117be35b

  • SHA256

    d9e1187a68c4f2b528d47e5ca14a7ffbe4805ad214834c6aa1c616e27e6b9e60

  • SHA512

    eeb67fb8755e91fd9a8875181704520da59a6b948c13537b44b6a36d4b1834e8904dce36f3986b16b83015a35d8a8917a94480491bd069e53f889ca01cd95239

  • SSDEEP

    24576:C2Em+bjDRhlnD1bQLrP7s7vnf8hf6CzIPw7qFV9TMAWVXuGum1xM3f/xzuSAUm4s:C2fOjDRrF4hJ6C0Y7qH9TMDXuR/uSOz

Score
N/A

Malware Config

Signatures

Files

  • infected2022122701.zip
    .zip

    Password: infected

  • ProgramData/AliWifiProc.exe
    .exe windows x86

    Password: infected

    9e5809e031ebf07a09f25f64d5ebbe5b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ProgramData/CCStart.exe
    .exe windows x86

    Password: infected

    2afd4b32c2ca61fdaad872e1010a9474


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ProgramData/MzilYksl.exe
    .exe windows x86

    Password: infected

    9e5809e031ebf07a09f25f64d5ebbe5b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ProgramData/RobocraftBase (1).dll
    .dll windows x86

    Password: infected

    f12314f8b09aa87d801489964bf51de1


    Headers

    Imports

    Exports

    Sections

  • ProgramData/RobocraftBase.dll
    .dll windows x86

    Password: infected

    17ba42e1664c17e5a2919b16a4bec9fc


    Headers

    Imports

    Exports

    Sections

  • ProgramData/a.ini
  • ProgramData/cba.bat - 内容.txt
  • ProgramData/cc.exe
    .exe windows x86

    Password: infected

    2947a49e70cc6eaa7aa442bd9d7287ec


    Headers

    Imports

    Sections

  • ProgramData/dx.vbs
    .vbs
  • ProgramData/jibmao.xml
  • ProgramData/l.dll
  • ProgramData/msvcp140.dll
    .dll windows x86

    Password: infected

    06cc814dbeda830328b76c5b11d9db1c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ProgramData/update.ini
  • ProgramData/vcruntime140.dll
    .dll windows x86

    Password: infected

    e44143d5ae0c7f7d377cee38e4466c05


    Code Sign

    Headers

    Imports

    Exports

    Sections