Overview

overview

10

Static

static

3

J搜索 - ...��.url

windows7-x64

1

J搜索 - ...��.url

windows10-2004-x64

1

Windows11�...��.exe

windows7-x64

1

Windows11�...��.exe

windows10-2004-x64

1

data/DisableWD.bat

windows7-x64

10

data/DisableWD.bat

windows10-2004-x64

10

data/EnableWD.bat

windows7-x64

10

data/EnableWD.bat

windows10-2004-x64

10

data/MinSudo.exe

windows7-x64

1

data/MinSudo.exe

windows10-2004-x64

1

爱纯净官网.url

windows7-x64

1

爱纯净官网.url

windows10-2004-x64

1

Resubmissions

23/11/2023, 18:06

231123-wpsk3abb76 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    52994d93d0d45c29cead1ff60e79348874c0a16b9c6d47de6e95b50a49ed5e19

  • Size

    315KB

  • MD5

    f87564e2c59e6bdd30bf8aed19e83e72

  • SHA1

    fab3cfdbe5b42ce70c921885b5f7c56b5ea4c340

  • SHA256

    52994d93d0d45c29cead1ff60e79348874c0a16b9c6d47de6e95b50a49ed5e19

  • SHA512

    2b7f22ae17d6f188c923ab6a412aa821f90c9ce89568a2e02084d4164203d39dce02da1106754045a1b6fd81630df8c85c4689312e9e6224416908d2d189b4eb

  • SSDEEP

    6144:tw1KEQ6izwNWveGiCrWs0tTzhyAfuZ6EgQELseaIhZh8Z6GV5:IJizwUGGnWsYJj2WWyZhTi

Score
3/10
qrlink

Malware Config

Signatures

  • One or more HTTP URLs in qr code identified

    Detects presence of HTTP links in QR codes.

    qrlink
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 52994d93d0d45c29cead1ff60e79348874c0a16b9c6d47de6e95b50a49ed5e19
    .zip
  • J搜索 - 清爽干净的上网入口！.url
    .url
  • Windows11轻松设置.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • data/DisableWD.bat
  • data/EnableWD.bat
  • data/MinSudo.exe
    .exe windows:6 windows x64 arch:x64

    67388bde455ae6efd14658691bba0416


    Headers

    Imports

    Sections

  • data/readme.txt
  • data/smartscreen/disable.reg
  • data/smartscreen/restore.reg
  • 爱纯净官网.url
    .url
  • 爱纯净微信公众号.jpg
    .jpg

    • http://weixin.qq.com/r/AiiutiXEk3jsrWHV930Q