Overview
overview
3Static
static
3ָ�...��.htm
windows7-x64
1ָ�...��.htm
windows10-2004-x64
1ָ�...��.exe
windows7-x64
1ָ�...��.exe
windows10-2004-x64
1ָ�...��.url
windows7-x64
1ָ�...��.url
windows10-2004-x64
1ָ�...��.url
windows7-x64
1ָ�...��.url
windows10-2004-x64
1ָ�...��.url
windows7-x64
1ָ�...��.url
windows10-2004-x64
1ָ�...��.url
windows7-x64
1ָ�...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
ָ/77169.org˵.htm
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ָ/77169.org˵.htm
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
ָ/ָ.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
ָ/ָ.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
ָ/ĺڿͬ˽ѧѵ.url
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
ָ/ĺڿͬ˽ѧѵ.url
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
ָ/ĺڿͬ.url
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
ָ/ĺڿͬ.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
ָ/¿ƼIDC˾.url
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
ָ/¿ƼIDC˾.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
ָ/¿Ƽȫά.url
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
ָ/¿Ƽȫά.url
Resource
win10v2004-20231215-en
General
-
Target
0c6ad6f224d95b0aed47ded0ad579eb2
-
Size
1.6MB
-
MD5
0c6ad6f224d95b0aed47ded0ad579eb2
-
SHA1
af2377122fca3be6a32d46026044df1e10532657
-
SHA256
7ec17875b3cad3a168300eeab9d2a42b8d9677ebd6f0ffba0bb721245402985e
-
SHA512
b2c739a0ce2451c62be3ab82ffa8967043f4a292cee12dbd748b614ea3baeb9df7f5aa66969e3d63a261488d7a7b38ab3745c41e5d56361ac13e997f8e572ea0
-
SSDEEP
24576:HiF+WU2tRqd3VT7vcmd5NA/Th0xh3IJJzI9Xg/XZ49YCytpewdfX3L5u48SPbobG:H61Hs3WSi/di3gzI9Xg/+yzRFx8AoDu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ָ/ָ.exe
Files
-
0c6ad6f224d95b0aed47ded0ad579eb2.zip
-
ָ/##ע##.txt
-
ָ/77169.orgʹð˵.txt
-
ָ/77169.org˵.htm.html
-
ָ/ ##ע##.txt
-
ָ/ָ.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 82KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 359KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
ָ/ĺڿͬ˽ѧѵ.url
-
ָ/ĺڿͬ.url
-
ָ/¿ƼIDC˾.url
-
ָ/¿Ƽȫά.url