Overview

overview

8

Static

static

3

360.cmd

windows7-x64

4

360.cmd

windows10-2004-x64

4

361.cmd

windows7-x64

1

361.cmd

windows10-2004-x64

1

36O安全�... 3.lnk

windows7-x64

3

36O安全�... 3.lnk

windows10-2004-x64

3

36O安全�... 3.lnk

windows7-x64

3

36O安全�... 3.lnk

windows10-2004-x64

3

Internet Expl0rer.lnk

windows7-x64

3

Internet Expl0rer.lnk

windows10-2004-x64

3

Microsoft/bot.vbs

windows7-x64

3

Microsoft/bot.vbs

windows10-2004-x64

7

cpa.cmd

windows7-x64

1

cpa.cmd

windows10-2004-x64

1

dodo.vbs

windows7-x64

1

dodo.vbs

windows10-2004-x64

1

fav/fav.cmd

windows7-x64

1

fav/fav.cmd

windows10-2004-x64

1

fav/fav.lnk

windows7-x64

3

fav/fav.lnk

windows10-2004-x64

7

fav/fav.vbs

windows7-x64

3

fav/fav.vbs

windows10-2004-x64

7

fav/淘宝购物.url

windows7-x64

1

fav/淘宝购物.url

windows10-2004-x64

1

fav/网址导航.url

windows7-x64

1

fav/网址导航.url

windows10-2004-x64

1

fav/软件下载.url

windows7-x64

1

fav/软件下载.url

windows10-2004-x64

1

file.vbs

windows7-x64

8

file.vbs

windows10-2004-x64

8

open.vbs

windows7-x64

1

open.vbs

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5c30db5b5545342df0aab3c8910e370e

  • Size

    157KB

  • MD5

    5c30db5b5545342df0aab3c8910e370e

  • SHA1

    fc12d1a911dfe5eec7035360f065d565278b7f89

  • SHA256

    007f1eb061f337e453c0f62845dd3470295af8fbe886a2ab33b027b5c5029a1c

  • SHA512

    d605021e9e78544713c1e529c85bea7b2e27bb3208af1abed84d97db053512c390bf73a5613cbc98edf46f3c90fc7273974fa1d5f2f7024c3f91a22d6d7b5b6c

  • SSDEEP

    3072:jhBk3mx0j6ap8fWrr27J5p9hTsCEGAqB0ZrnGtGqTaPc8HQtaf:1AuaufWG7JbvTsCIq6G7Gfwtw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5c30db5b5545342df0aab3c8910e370e
    .rar
  • 360.cmd
  • 361.cmd
  • 36O安全浏览器 3.lnk
    .lnk
  • 36O安全浏览器 3.lnk
    .lnk
  • Internet Expl0rer.lnk
    .lnk
  • Microsoft/bot.vbs
    .vbs
  • cpa.cmd
  • dodo.vbs
    .vbs
  • fav/fav.cmd
  • fav/fav.lnk
    .lnk
  • fav/fav.vbs
    .vbs
  • fav/tao.ico
  • fav/tao2.ico
  • fav/淘宝购物.url
    .url
  • fav/网址导航.url
  • fav/软件下载.url
  • file.vbs
    .vbs
  • open.vbs
    .vbs
  • runonce.cmd
  • se.vbs
    .vbs
  • se1.vbs
    .vbs
  • soft/msn.exe
    .exe windows:4 windows x86 arch:x86

    ccc0e829fe1206cd39d147ca374725d4


    Headers

    Imports

    Sections

  • starts.vbs
    .vbs
  • tool.cmd
  • tools.lnk
    .lnk
  • 安全工具.vbs
    .vbs