Overview

overview

3

Static

static

3

fxt/飞信...ms.htm

windows7-x64

1

fxt/飞信...ms.htm

windows10-2004-x64

1

fxt/飞信...PL.exe

windows7-x64

1

fxt/飞信...PL.exe

windows10-2004-x64

1

fxt/飞信...��.exe

windows7-x64

3

fxt/飞信...��.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    07255b5512986bb634c86f814bfa3900

  • Size

    761KB

  • MD5

    07255b5512986bb634c86f814bfa3900

  • SHA1

    5cdc95d600dcf2c60243e16fbf2266d0a3cd5c96

  • SHA256

    43b3adb92bcfb592a0e3f993435c442dd2f1df570c54d52753c78b7400132518

  • SHA512

    36a3557cc5892e41bdb0cea41a246e401a42e67f3d12a3e0a3d9b74fd1c82e223948313a360bdbe3efdc9e5ca55c9990992c29ec6b6ae72aa0118301a4b67363

  • SSDEEP

    12288:bfclm/+b6xCbUW0L5vvL/5S8G3GJVeB5JGD7og8iZD1SYtMeqwXwBY51dcxeyAM8:jE4++SUhL5vvDA8dOB5UfQiZD1XvqJ6/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 07255b5512986bb634c86f814bfa3900
    .rar
  • fxt/飞信通客户端/888netsms.htm
    .html
  • fxt/飞信通客户端/GetPL.exe
    .exe windows:4 windows x86 arch:x86

    81ec3f02d4bfa87d0662a516535b4d94


    Headers

    Imports

    Sections

  • fxt/飞信通客户端/add.dat
  • fxt/飞信通客户端/addr.dat
  • fxt/飞信通客户端/am.dat
  • fxt/飞信通客户端/index.dat
  • fxt/飞信通客户端/m2.bmp
  • fxt/飞信通客户端/m3.jpg
    .jpg
  • fxt/飞信通客户端/phrase/中秋祝福.txt
  • fxt/飞信通客户端/phrase/友谊万岁.txt
  • fxt/飞信通客户端/phrase/商务用语.txt
  • fxt/飞信通客户端/phrase/感谢之情.txt
  • fxt/飞信通客户端/phrase/生日祝福.txt
  • fxt/飞信通客户端/phrase/真诚祝福.txt
  • fxt/飞信通客户端/phrase/礼貌用语.txt
  • fxt/飞信通客户端/phrase/经典谚语.txt
  • fxt/飞信通客户端/phrase/聚会约定.txt
  • fxt/飞信通客户端/phrase/诚心道歉.txt
  • fxt/飞信通客户端/temp.mdb
  • fxt/飞信通客户端/url.ini
  • fxt/飞信通客户端/飞信通客户端.exe
    .exe windows:4 windows x86 arch:x86

    c9a54565e00896a9ef9e693b2cab8209


    Headers

    Imports

    Sections