Overview

overview

8

Static

static

3

�...ck.exe

windows7-x64

8

�...ck.exe

windows10-2004-x64

8

�...nf.exe

windows7-x64

8

�...nf.exe

windows10-2004-x64

8

�...st.exe

windows7-x64

1

�...st.exe

windows10-2004-x64

1

�...ll.bat

windows7-x64

8

�...ll.bat

windows10-2004-x64

8

�...ll.bat

windows7-x64

1

�...ll.bat

windows10-2004-x64

1

�...te.bat

windows7-x64

1

�...te.bat

windows10-2004-x64

1

�...¼.pdf

windows7-x64

1

�...¼.pdf

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    8656e24f8466734b0d361ee2d2711a4d8feec49a4e52e5b8d6310abd505e9b20

  • Size

    3.1MB

  • MD5

    4d915984971b0d4498aecc01af094070

  • SHA1

    059b839f85ae35a4000c8ed6f6e05b67819c0e8a

  • SHA256

    8656e24f8466734b0d361ee2d2711a4d8feec49a4e52e5b8d6310abd505e9b20

  • SHA512

    8ea6b064c4e4e3a2e7e3385f524dbaf188f47628274406d1053f6a1645037f95567886bf2a32d42bd7681b5e248d209162f277a865c420a3d3a66ec5b0ac2262

  • SSDEEP

    98304:9A1HRJ9+yY17N5vSoMirMjLxGF747+YhPzV:kxsNdemYtV

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 8656e24f8466734b0d361ee2d2711a4d8feec49a4e52e5b8d6310abd505e9b20
    .zip
  • ˺ͬʱ/RDPWrap-v1.6.2/RDPCheck.exe
    .exe windows:5 windows x86 arch:x86

    05a0d0ec656ffbcba1d60f4783a3f1d9


    Headers

    Imports

    Sections

  • ˺ͬʱ/RDPWrap-v1.6.2/RDPConf.exe
    .exe windows:5 windows x86 arch:x86

    401f49861c03e27b1837ef48b7fb06e2


    Headers

    Imports

    Sections

  • ˺ͬʱ/RDPWrap-v1.6.2/RDPWInst.exe
    .exe windows:5 windows x86 arch:x86

    a89655faa2b6840e801be1e1c779fc67


    Headers

    Imports

    Sections

  • ˺ͬʱ/RDPWrap-v1.6.2/install.bat
  • ˺ͬʱ/RDPWrap-v1.6.2/uninstall.bat
  • ˺ͬʱ/RDPWrap-v1.6.2/update.bat
  • ˺ͬʱ/rdpwrap.ini
  • ˺ͬʱ/win10ûԶ̵¼.pdf
    .pdf