Overview

overview

7

Static

static

3

sqldbxshdh...bx.chm

windows7-x64

1

sqldbxshdh...bx.chm

windows10-2004-x64

1

sqldbxshdh...bx.exe

windows7-x64

1

sqldbxshdh...bx.exe

windows10-2004-x64

7

sqldbxshdh...bx.pdf

windows7-x64

1

sqldbxshdh...bx.pdf

windows10-2004-x64

1

sqldbxshdh...hs.exe

windows7-x64

1

sqldbxshdh...hs.exe

windows10-2004-x64

1

sqldbxshdh...�).htm

windows7-x64

1

sqldbxshdh...�).htm

windows10-2004-x64

1

sqldbxshdh...�).url

windows7-x64

1

sqldbxshdh...�).url

windows10-2004-x64

1

sqldbxshdh...�).htm

windows7-x64

1

sqldbxshdh...�).htm

windows10-2004-x64

1

sqldbxshdh...�).url

windows7-x64

1

sqldbxshdh...�).url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    24a1aab704c5d8b0d157c502bd5eb3e6

  • Size

    2.4MB

  • MD5

    24a1aab704c5d8b0d157c502bd5eb3e6

  • SHA1

    4106b56842aa683682a59f71b7be9fbadfad3b96

  • SHA256

    3dcadee98016192274d078d28079d2d065b35de3783b540e4b7cf0a7692ce0b1

  • SHA512

    783d921a889e4e2d920aadb5f5f9a4cfbcd86a6adabec2501e28eee9d060b9125f1a013629c58186bc3df7665db3c359f65e6ddeac9f63cf5a0e8b36654b128a

  • SSDEEP

    49152:N0WVDuaSnGsg3/Ep4Ifmy03biXFrTeP9toMi4dh7B:Hudk84IfnvBTqti4dh9

Score
3/10
pdflink

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 24a1aab704c5d8b0d157c502bd5eb3e6
    .rar
  • sqldbxshdhjqhdnj/SQLDBX_ZHS/SqlDbx.chm
    .chm
  • sqldbxshdhjqhdnj/SQLDBX_ZHS/SqlDbx.chw
  • sqldbxshdhjqhdnj/SQLDBX_ZHS/SqlDbx.exe
    .exe windows:5 windows x86 arch:x86

    f535becc13d9b55f872163c5f4de42a6


    Headers

    Imports

    Sections

  • sqldbxshdhjqhdnj/SQLDBX_ZHS/SqlDbx.pdf
    .pdf

    • http://dev.mysql.com/downloads/connector/odbc/

    • http://www.postgresql.org/ftp/odbc/versions/

    • https://code.kx.com/trac/wiki/Cookbook/ODBC

  • sqldbxshdhjqhdnj/SQLDBX_ZHS/SqlDbx_zhs.exe
    .exe windows:5 windows x86 arch:x86

    f535becc13d9b55f872163c5f4de42a6


    Headers

    Imports

    Sections

  • sqldbxshdhjqhdnj/SQLDBX_ZHS/下载说明(河东软件园).htm
    .html
  • sqldbxshdhjqhdnj/SQLDBX_ZHS/使用帮助(河东软件园).url
    .url
  • sqldbxshdhjqhdnj/SQLDBX_ZHS/使用说明(河东软件园).txt
  • sqldbxshdhjqhdnj/下载说明(河东软件园).htm
    .html
  • sqldbxshdhjqhdnj/使用帮助(河东软件园).url
    .url
  • sqldbxshdhjqhdnj/使用说明(河东软件园).txt