Overview

overview

3

Static

static

3

X-DAKILL.sys

windows7-x64

1

X-DAKILL.sys

windows10-2004-x64

1

X-DAKillFile.sys

windows7-x64

1

X-DAKillFile.sys

windows10-2004-x64

1

qm.dll

windows7-x64

1

qm.dll

windows10-2004-x64

1

Ƥ.dll

windows7-x64

3

Ƥ.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1487b716bf98591475a8d673ac640a8d

  • Size

    550KB

  • MD5

    1487b716bf98591475a8d673ac640a8d

  • SHA1

    cfda9fa22f2d6fa8181e10d3e09423bd9722fb53

  • SHA256

    16ac1e770094e36246683d471ea6755b4cbad2c1ac71c96d9f49c2c307186152

  • SHA512

    0c98e64b8501e1c94f98b6bb766e40e2613b9bb2e321ecc8b73c3ba639efd872ffcca5f76fc48c51cda1ed2102147f1b4cb09bf146524567a06ad17e15c5ae71

  • SSDEEP

    12288:2cYUiXijnO5t2Wi5OGImz5mPAVo0RQwFW0zn7ZDZtws+PS:2siXdti4GY6B3FvOhS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 1487b716bf98591475a8d673ac640a8d
    .zip
  • X-DAKILL.sys
    .sys windows:5 windows x86 arch:x86

    bd4f4587ca581be542ec2e0ddccbf83e


    Headers

    Imports

    Sections

  • X-DAKillFile.sys
    .sys windows:5 windows x86 arch:x86

    4e6a1493ddf45baba5868efaf0ce5934


    Headers

    Imports

    Sections

  • qm.DLL
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Ƥ.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Ƥ/Aero.she
  • Ƥ/MSN.she
  • Ƥ/QQ2009.she
  • Ƥ/darkroyale.she
  • Ƥ/dogmax.she
  • Ƥ/enjoy.she
  • Ƥ/gem.she
  • Ƥ/homestead.she
  • Ƥ/itunes.she
  • Ƥ/longhorn.she
  • Ƥ/office2007.she
  • Ƥ/ouframe.she
  • Ƥ/pixos.she
  • Ƥ/qqgame.she
  • Ƥ/vista.she
  • Ƥ/ɫ.she
  • Ƥ/ľ.she
  • Ƥ/й.she