Overview

overview

10

Static

static

7

infected20...1).chm

windows7-x64

1

infected20...1).chm

windows10-2004-x64

7

infected20...df.exe

windows7-x64

7

infected20...df.exe

windows10-2004-x64

7

infected20...�1.exe

windows7-x64

1

infected20...�1.exe

windows10-2004-x64

1

infected20...ls.exe

windows7-x64

7

infected20...ls.exe

windows10-2004-x64

7

infected20...fo.exe

windows7-x64

7

infected20...fo.exe

windows10-2004-x64

7

infected20...od.exe

windows7-x64

7

infected20...od.exe

windows10-2004-x64

7

infected20...25.exe

windows7-x64

7

infected20...25.exe

windows10-2004-x64

7

infected20...��.exe

windows7-x64

1

infected20...��.exe

windows10-2004-x64

1

infected20...nd.exe

windows7-x64

1

infected20...nd.exe

windows10-2004-x64

1

infected20...eg.exe

windows7-x64

10

infected20...eg.exe

windows10-2004-x64

10

infected20...#r.exe

windows7-x64

7

infected20...#r.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    infected2023042501.rar

  • Size

    17.7MB

  • MD5

    72e4f3608ecfbb1098a5ff7ea171d541

  • SHA1

    995598c603e6f212005a8dd6f3150d780fac8ded

  • SHA256

    82b8d175292a3441624af910e61ef4c6abadbea2efe824e7883b145acdf18974

  • SHA512

    6d97d452505e48ccbd32a08ef9be803bbc6ef2781af06ad5917f80597ad3601ad09ff221105cd4e6f4caf3b2ae69356eb31837fc216b21802dde8fa823765224

  • SSDEEP

    393216:Y8Kw9H0QleuaUhxiC7DJxi9pOvjdd6KsDvDiMV3cMy:YcUQl8JaJ49wv3SDiMV3cJ

Score
7/10
pyinstallerupx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • infected2023042501.rar
    .rar
  • infected2023042501/Downloads/-252871022_150(1).CHM
    .chm
  • infected2023042501/Downloads/2021-2022年度民航青年文明号拟命名集体名单.pdf .exe
    .exe windows x64

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections

  • infected2023042501/Downloads/2023企业个人最新版所得税缴纳标准1.exe
    .exe windows x86

    db2475a8ffe9e88bdede9b428c196715


    Headers

    Imports

    Sections

  • infected2023042501/Downloads/Quotation_copy_xls.exe
    .exe windows x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • infected2023042501/Downloads/getsysteminfo.exe
    .exe windows x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • infected2023042501/Downloads/中航信移动科技有限公司〔2023〕7号.‮xcod.exe.exe
    .exe windows x64


    Headers

    Sections

  • infected2023042501/Downloads/公积金信息_20230425.exe
    .exe windows x64

    d87675047f53428fe6e9eee62dc46129


    Headers

    Imports

    Sections

  • infected2023042501/Downloads/工号：YC01198-工作邮箱：[email protected]使用工位网口异常反馈.exe
    .exe windows x64

    d87675047f53428fe6e9eee62dc46129


    Headers

    Imports

    Sections

  • infected2023042501/Downloads/永赢基金管理有限公司客户相关的投诉信件内容_maxwealthfund.com
    .exe windows x64

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections

  • infected2023042501/Downloads/深圳智园总部饭堂吃出小蟑螂食品安全事件图片证据jpeg.exe
    .exe windows x64

    53e22939c3dc2b61cd5205e10e34ba47


    Headers

    Imports

    Sections

  • infected2023042501/Downloads/资金账户对账单导出#r.com
    .exe windows x86

    3708fbbcc08bea10dc844b08d789cd0b


    Headers

    Imports

    Sections