Overview

overview

6

Static

static

3

ArmAccess.dll

windows7-x64

1

ArmAccess.dll

windows10-2004-x64

1

AutoCopy.exe

windows7-x64

6

AutoCopy.exe

windows10-2004-x64

1

MSVBVM60.dll

windows7-x64

1

MSVBVM60.dll

windows10-2004-x64

1

diskcopy.dll

windows7-x64

1

diskcopy.dll

windows10-2004-x64

1

飞翔下载.url

windows7-x64

1

飞翔下载.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0aaf3aa3c700e6c9c38f2aec67450f50

  • Size

    892KB

  • MD5

    0aaf3aa3c700e6c9c38f2aec67450f50

  • SHA1

    02024794b92f8de1fd324183cf8815b041e2686d

  • SHA256

    8b3c6a051d3d95055e9571c53346a0e262b32d17bbc26de495cffddd7b73528f

  • SHA512

    2aea1b10788910edb50e5c4b1d5fd04804cbd5460fe8410e9fc1cb9bbd225d467874d6bec34ffe34a1819888e074ded4e0acf1946444d9c06bdbf36395598180

  • SSDEEP

    24576:06KHpx9wnVVswJL/gpL2TSviaseFKIcY0eVZI:qH9wnVV/JL/WOSvleNew

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 0aaf3aa3c700e6c9c38f2aec67450f50
    .rar
  • ArmAccess.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    d1e10a04ad85a14abc67c0f2a2f79aed


    Headers

    Imports

    Exports

    Sections

  • AutoCopy.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • MSVBVM60.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    52aa5ee856953e49635e554af5207319


    Headers

    Imports

    Exports

    Sections

  • Readme.txt
  • diskcopy.dll
    .dll windows:4 windows x86 arch:x86

    b1476637910c54e2e5b9eb8cce1064ac


    Headers

    Imports

    Exports

    Sections

  • setting.ini
  • 安装必看.txt
  • 飞翔下载.url
  • 飞翔下载说明.txt