Overview

overview

7

Static

static

3

rm.promote...wk.exe

windows7-x64

1

rm.promote...wk.exe

windows10-2004-x64

1

rmpromoter.exe

windows7-x64

7

rmpromoter.exe

windows10-2004-x64

1

非常世�...��.url

windows7-x64

1

非常世�...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1e74a38979902048c315eb54d49e2b00

  • Size

    1.8MB

  • MD5

    1e74a38979902048c315eb54d49e2b00

  • SHA1

    2adb16d237ed907c1529164707fd5ee44a2e168f

  • SHA256

    35cd13f65c92efe60f90d42da8fd61c1e72fe23fe8ffcb3951d20d9e9f6df83f

  • SHA512

    a4602835954c408201b34ba760431328d0690c4dba26047f3191cb38f7cca486f19d442185e25f772865fef134584146fc128e82dcb57f5671bfef1c3deb60ac

  • SSDEEP

    49152:hKtX80xrNPe6O6nOi3s4RUmjZHilWZQd/cb1y:h7IPs6czsZOgy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e74a38979902048c315eb54d49e2b00
    .rar
  • rm.promoter.v1.4-patch-twk.exe
    .exe windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • rmpromoter.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • 下载说明.htm
    .html .js polyglot
  • 安装说明.txt
  • 非常世纪资源网.url
    .url