Overview

overview

3

Static

static

3

生成数�...te.exe

windows7-x64

3

生成数�...te.exe

windows10-2004-x64

1

生成数�...t .cmd

windows7-x64

1

生成数�...t .cmd

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0df053c613975d32d834446a5477d8e3d0a1669677fa5152409c3845c41c6ea7

  • Size

    184KB

  • MD5

    61dd68409cda569e18271830a7f11521

  • SHA1

    6f03586e8942e1608c498a0964b33e664351b479

  • SHA256

    0df053c613975d32d834446a5477d8e3d0a1669677fa5152409c3845c41c6ea7

  • SHA512

    1da07505b6cc9d1d61c6627f5b3da25b1f75791d6ae158746092c2a2977b7993bee22d64347cd1a85a9b9ccb12c34ed1832732879d4aad0bc7fb2bfb2c4ab26f

  • SSDEEP

    3072:x4R30u6jHHGZVqCwMhemgJ0krnaC08/B2C5LQTr4ZxmGrzL0NpMZj6yB3p1b3VZa:xs0u6CrLvhem2ucmX4fmG/wAbT1b3VZa

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0df053c613975d32d834446a5477d8e3d0a1669677fa5152409c3845c41c6ea7
    .zip
  • 生成数字门票/gatherosstate.exe
    .exe windows:10 windows x86

    de6c800823c77882b5d9888457698a55


    Headers

    Imports

    Sections

  • 生成数字门票/生成HWID_GenuineTicket .cmd