Overview

overview

7

Static

static

7

COMDLG32.dll

windows7-x64

1

COMDLG32.dll

windows10-2004-x64

1

Server/khzz.dll

windows7-x64

7

Server/khzz.dll

windows10-2004-x64

7

Server/登...��.exe

windows7-x64

1

Server/登...��.exe

windows10-2004-x64

1

gg.htm

windows7-x64

1

gg.htm

windows10-2004-x64

1

傲天登�...��.exe

windows7-x64

1

傲天登�...��.exe

windows10-2004-x64

1

傲天登�...��.exe

windows7-x64

1

傲天登�...��.exe

windows10-2004-x64

1

名扬天下.exe

windows7-x64

3

名扬天下.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    bfd6bef1da46fe8db7ab06d673044a44

  • Size

    1.8MB

  • MD5

    bfd6bef1da46fe8db7ab06d673044a44

  • SHA1

    d31357d32427e0f6d69d0a59396958ad9e490cb1

  • SHA256

    8a3691d72bdeae5b06abcec1f43f8866ff9bd9ae2c45ef581ee9e74e8fa4e098

  • SHA512

    8841b40534158401d92129745a243cad9b279e1c4782cc8a0c5798b4981734715bfa86a221c21534d9b25fe410b49f7efab438c2d00bc5738a2b7267021b141d

  • SSDEEP

    24576:xRihWwLPQF1jMfqqMluDOgw+uRvd5HYXeobvl35l7tH19VZ33S4dD6K1EoL8tg:UDQ3aqq+uDZGvd29blJlRTVZ33L6KWg

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • bfd6bef1da46fe8db7ab06d673044a44
    .rar
  • COMDLG32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • LogixSer/LoginNews.gif
    .gif
  • LogixSer/LoginNews001.jpg
    .jpg
  • LogixSer/LoginNews002.jpg
    .jpg
  • LogixSer/LoginNews003.jpg
    .jpg
  • LogixSer/LoginNews004.jpg
    .jpg
  • LogixSer/LoginNewsBG.jpg
    .jpg
  • LogixSer/LoginNewsFoot.jpg
    .jpg
  • LogixSer/LoginNewsTop.jpg
    .jpg
  • Server/config.ini
  • Server/khzz.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Server/登录器网关.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • config.cfg
  • gg.htm
  • server.txt
  • 傲天登陆器修改工具.exe
    .exe windows:4 windows x86 arch:x86

    3d7c3bd5c0921e7c9bf2a8ffff8e4a74


    Headers

    Imports

    Sections

  • 傲天登陆器补丁配置工具.exe
    .exe windows:4 windows x86 arch:x86

    4d96baf3b2139c115d5424e9d674612c


    Headers

    Imports

    Sections

  • 名扬天下.exe
    .exe windows:4 windows x86 arch:x86

    eefd92b7f1e7453371cd837c4f7933ec


    Headers

    Imports

    Sections

  • 触发.txt