Overview

overview

8

Static

static

3

360.cmd

windows7-x64

4

360.cmd

windows10-2004-x64

4

361.cmd

windows7-x64

1

361.cmd

windows10-2004-x64

1

36O安全�... 3.lnk

windows7-x64

3

36O安全�... 3.lnk

windows10-2004-x64

3

36O安全�... 3.lnk

windows7-x64

3

36O安全�... 3.lnk

windows10-2004-x64

3

Internet Expl0rer.lnk

windows7-x64

3

Internet Expl0rer.lnk

windows10-2004-x64

3

Microsoft/bot.vbs

windows7-x64

3

Microsoft/bot.vbs

windows10-2004-x64

7

cpa.cmd

windows7-x64

1

cpa.cmd

windows10-2004-x64

1

dodo.vbs

windows7-x64

1

dodo.vbs

windows10-2004-x64

1

fav/fav.cmd

windows7-x64

1

fav/fav.cmd

windows10-2004-x64

1

fav/fav.lnk

windows7-x64

3

fav/fav.lnk

windows10-2004-x64

7

fav/fav.vbs

windows7-x64

3

fav/fav.vbs

windows10-2004-x64

7

fav/淘宝购物.url

windows7-x64

1

fav/淘宝购物.url

windows10-2004-x64

1

fav/网址导航.url

windows7-x64

1

fav/网址导航.url

windows10-2004-x64

1

fav/软件下载.url

windows7-x64

1

fav/软件下载.url

windows10-2004-x64

1

file.vbs

windows7-x64

8

file.vbs

windows10-2004-x64

8

open.vbs

windows7-x64

1

open.vbs

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1d6a4b0f2107283ffe5249415c2cf32c

  • Size

    157KB

  • MD5

    1d6a4b0f2107283ffe5249415c2cf32c

  • SHA1

    ff7055d95d50850b36342155e25eb90eb21aba06

  • SHA256

    38b1e38f5404868df83a73cf6197984596c4edd3715bb1e4af65f0bd9c91b71b

  • SHA512

    c828bcf783aeae1fbb78ce2c5dde510f3c2c48107976c38232531d60d01f9a3fb43e29a70e75b1e7e08e6134f793315786fb4533e2cecc173ed6139bed8718a4

  • SSDEEP

    3072:jhBk3mx0j6ap8fWrr27J5p9hTsCEGAqB0ZrnGtGqTaPc8HQtaQ:1AuaufWG7JbvTsCIq6G7GfwtD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d6a4b0f2107283ffe5249415c2cf32c
    .rar
  • 360.cmd
  • 361.cmd
  • 36O安全浏览器 3.lnk
    .lnk
  • 36O安全浏览器 3.lnk
    .lnk
  • Internet Expl0rer.lnk
    .lnk
  • Microsoft/bot.vbs
    .vbs
  • cpa.cmd
  • dodo.vbs
    .vbs
  • fav/fav.cmd
  • fav/fav.lnk
    .lnk
  • fav/fav.vbs
    .vbs
  • fav/tao.ico
  • fav/tao2.ico
  • fav/淘宝购物.url
    .url
  • fav/网址导航.url
  • fav/软件下载.url
  • file.vbs
    .vbs
  • open.vbs
    .vbs
  • runonce.cmd
  • se.vbs
    .vbs
  • se1.vbs
    .vbs
  • soft/msn.exe
    .exe windows:4 windows x86 arch:x86

    ccc0e829fe1206cd39d147ca374725d4


    Headers

    Imports

    Sections

  • starts.vbs
    .vbs
  • tool.cmd
  • tools.lnk
    .lnk
  • 安全工具.vbs
    .vbs