Overview

overview

8

Static

static

3

360.cmd

windows7-x64

4

360.cmd

windows10-2004-x64

4

360SE.vbs

windows7-x64

3

360SE.vbs

windows10-2004-x64

7

361.cmd

windows7-x64

1

361.cmd

windows10-2004-x64

1

36OSE.vbs

windows7-x64

6

36OSE.vbs

windows10-2004-x64

7

36O安全�... 3.lnk

windows7-x64

3

36O安全�... 3.lnk

windows10-2004-x64

3

36O安全�...�3.lnk

windows7-x64

3

36O安全�...�3.lnk

windows10-2004-x64

3

Install_7xdown.vbs

windows7-x64

8

Install_7xdown.vbs

windows10-2004-x64

8

Internet Exploror.lnk

windows7-x64

3

Internet Exploror.lnk

windows10-2004-x64

3

copy.cmd

windows7-x64

8

copy.cmd

windows10-2004-x64

8

cpa.cmd

windows7-x64

7

cpa.cmd

windows10-2004-x64

7

is.cmd

windows7-x64

1

is.cmd

windows10-2004-x64

1

msn.exe

windows7-x64

7

msn.exe

windows10-2004-x64

7

runonce.cmd

windows7-x64

8

runonce.cmd

windows10-2004-x64

8

tool.cmd

windows7-x64

7

tool.cmd

windows10-2004-x64

7

winare.vbs

windows7-x64

3

winare.vbs

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    126b6af2c78167951aeb4d164d340a06

  • Size

    335KB

  • MD5

    126b6af2c78167951aeb4d164d340a06

  • SHA1

    0b906a582a52535dc18225595b5c975ae0decef9

  • SHA256

    4f648eab2b2376431c9ffd8399dc880adc057b130f4ca062a91e563214dded7c

  • SHA512

    5832020ab441ef4c9f72eb9cb84bae9345b52f841c799cd2dae49b74441a8d3ee4ec83a4b6667f97cf94c2ed3f4239a5feb9e47c6df558a116efe6523a4605f8

  • SSDEEP

    6144:mN84OYWMcAylDfRqriEC0zvmukhMDJzLw6iwjfU9kNre1G:aHOJxl/0z+uoqzBTQGteI

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 126b6af2c78167951aeb4d164d340a06
    .rar
  • 360.cmd
  • 360SE.vbs
    .vbs
  • 361.cmd
  • 36OSE.vbs
    .vbs
  • 36O安全刘览器 3.lnk
    .lnk
  • 36O安全刘览器3.lnk
    .lnk
  • Install_7xdown.vbs
    .vbs
  • Internet Exploror.lnk
    .lnk
  • copy.cmd
  • cpa.cmd
  • is.cmd
  • msn.exe
    .exe windows:4 windows x86 arch:x86

    a6d1f237a38b6e7d3a48b606fa0d7939


    Headers

    Imports

    Sections

  • runonce.cmd
  • tool.cmd
  • winare.vbs
    .vbs