Overview

overview

7

Static

static

3

阅读程�...up.exe

windows7-x64

1

阅读程�...up.exe

windows10-2004-x64

1

驱动/32�...ll.bat

windows7-x64

7

驱动/32�...ll.bat

windows10-2004-x64

7

驱动/32�...ll.bat

windows7-x64

6

驱动/32�...ll.bat

windows10-2004-x64

6

驱动/32�...86.msi

windows7-x64

7

驱动/32�...86.msi

windows10-2004-x64

7

驱动/32�...rv.sys

windows7-x64

1

驱动/32�...rv.sys

windows10-2004-x64

1

驱动/32�...ns.dll

windows7-x64

1

驱动/32�...ns.dll

windows10-2004-x64

1

驱动/32�...�).pdf

windows7-x64

1

驱动/32�...�).pdf

windows10-2004-x64

1

驱动/64�...ll.bat

windows7-x64

7

驱动/64�...ll.bat

windows10-2004-x64

7

驱动/64�...ll.bat

windows7-x64

6

驱动/64�...ll.bat

windows10-2004-x64

6

驱动/64�...64.msi

windows7-x64

7

驱动/64�...64.msi

windows10-2004-x64

7

驱动/64�...rv.sys

windows7-x64

1

驱动/64�...rv.sys

windows10-2004-x64

1

驱动/64�...ns.dll

windows7-x64

1

驱动/64�...ns.dll

windows10-2004-x64

1

驱动/64�...�).pdf

windows7-x64

1

驱动/64�...�).pdf

windows10-2004-x64

1

驱动/Win...rv.sys

windows7-x64

1

驱动/Win...rv.sys

windows10-2004-x64

1

驱动/Win...ns.dll

windows7-x64

1

驱动/Win...ns.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    13fe69c4f33267ca9af4fe394d0f156d4970fe185772ef406e306a6cebe4bc6c

  • Size

    5.7MB

  • MD5

    f63d61f6beddba2b9010437b32f75450

  • SHA1

    00ee73b0afb86ab11097aa47e1342c5d1ade86af

  • SHA256

    13fe69c4f33267ca9af4fe394d0f156d4970fe185772ef406e306a6cebe4bc6c

  • SHA512

    52a007456089e5f1d967eb50939b8d71cb3922b105d2a0d62f0193d6165208bf00c70f316c5d56e46b1a8f6636a0698c9db03d209a4e2c6f6f3478dfb8494305

  • SSDEEP

    98304:kD4s/cCe2DpSfm+oo8LNsxPW1tr3djDcq8r3IobE6kJ7eWc26c9wZkm5G7O04ZC7:kDj/cC3F2m+bdi5dkqgIuKaUGZ7v5Qag

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 13fe69c4f33267ca9af4fe394d0f156d4970fe185772ef406e306a6cebe4bc6c
    .zip
  • 阅读程序/setup.exe
    .exe windows x86


    Headers

    Sections

  • 驱动/32位Windows操作系统驱动/MSI安装包/ReadMe.txt
  • 驱动/32位Windows操作系统驱动/MSI安装包/USBDrv-install.bat
  • 驱动/32位Windows操作系统驱动/MSI安装包/USBDrv-uninstall.bat
  • 驱动/32位Windows操作系统驱动/MSI安装包/USBDrv3.0-x86.msi
    .msi
  • 驱动/32位Windows操作系统驱动/驱动文件/USBDrv.sys
    .sys windows x86

    8aace94ce80cce4627a56826465c5ca5


    Headers

    Imports

    Sections

  • 驱动/32位Windows操作系统驱动/驱动文件/USBDrvCo.inf
  • 驱动/32位Windows操作系统驱动/驱动文件/samcoins.dll
    .dll windows x86

    a64b3f28be21cf4acccb1c3201ed5d91


    Headers

    Imports

    Exports

    Sections

  • 驱动/32位Windows操作系统驱动/驱动文件/sdt_s_drv.cat
  • 驱动/32位Windows操作系统驱动/驱动文件/居民身份证验证安全模块安装卸载说明(32位Windows系统).pdf
    .pdf .ps1
  • 驱动/64位Windows操作系统驱动/MSI安装包/ReadMe.txt
  • 驱动/64位Windows操作系统驱动/MSI安装包/USBDrv-install.bat
  • 驱动/64位Windows操作系统驱动/MSI安装包/USBDrv-uninstall.bat
  • 驱动/64位Windows操作系统驱动/MSI安装包/USBDrv3.0-x64.msi
    .msi
  • 驱动/64位Windows操作系统驱动/驱动文件/USBDrv.sys
    .sys windows x64

    fa84d48e2187aef01a967054fa96a1e2


    Headers

    Imports

    Sections

  • 驱动/64位Windows操作系统驱动/驱动文件/USBDrvCo.inf
  • 驱动/64位Windows操作系统驱动/驱动文件/samcoins.dll
    .dll windows x64

    65ac31a680ca6c5de611cb1322d4d27d


    Headers

    Imports

    Exports

    Sections

  • 驱动/64位Windows操作系统驱动/驱动文件/sdt_s_drv_x64.cat
  • 驱动/64位Windows操作系统驱动/驱动文件/居民身份证验证安全模块安装卸载说明(64位Windows系统).pdf
    .pdf
  • 驱动/Win98 Driver/USBDrv.sys
    .sys windows x86

    8aace94ce80cce4627a56826465c5ca5


    Headers

    Imports

    Sections

  • 驱动/Win98 Driver/USBDrvCo.inf
  • 驱动/Win98 Driver/UsbDrv.inf
  • 驱动/Win98 Driver/samcoins.dll
    .dll windows x86

    a64b3f28be21cf4acccb1c3201ed5d91


    Headers

    Imports

    Exports

    Sections

  • 驱动/Win98 Driver/sdt_s_drv.cat