Overview

overview

7

Static

static

7

FileKill/BootDos.exe

windows7-x64

1

FileKill/BootDos.exe

windows10-2004-x64

1

FileKill/FileKill.exe

windows7-x64

1

FileKill/FileKill.exe

windows10-2004-x64

1

FileKill/hyfree.dll

windows7-x64

1

FileKill/hyfree.dll

windows10-2004-x64

3

FileKill/pkid.exe

windows7-x64

1

FileKill/pkid.exe

windows10-2004-x64

1

FileKill/�...��.url

windows7-x64

1

FileKill/�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    25a6f6cc32788f6a6796ab2c86174d1f

  • Size

    2.7MB

  • MD5

    25a6f6cc32788f6a6796ab2c86174d1f

  • SHA1

    dc7022e1bc1d00cba95afb52635f347c6331807d

  • SHA256

    f1e0584c749d76ed7035f4dc95004d5dc601f030393f150ad7b590c46442f9bb

  • SHA512

    93ab226abf3ecef9a86e53ff6aa39f3d4a5fd419ab3199581fd409124726f4d52d21efa2712df94ebf8b491b626ec51424fa23c7310ab7eed5761461154c7572

  • SSDEEP

    49152:tO9KlT2/e/lxGamQ2MVUo/7lH3p983Th0FkW9QetLlQwBUk3CRO51SEYC1:tO9G1/lcaWM6slHf8V0YKCQSsB

Score
7/10
aspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 2 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 25a6f6cc32788f6a6796ab2c86174d1f
    .rar
  • FileKill/BootDos.mmd
    .exe windows:4 windows x86 arch:x86

    09d0478591d4f788cb3e5ea416c25237


    Headers

    Imports

    Sections

  • FileKill/FileKill.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • FileKill/PKPro.sys
  • FileKill/PKProx.sys
  • FileKill/freedos.mmd
  • FileKill/freedos1.dat
  • FileKill/freedos1.mmd
  • FileKill/freedos2.mmd
  • FileKill/hyfree.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • FileKill/pkid.dll
    .exe windows:4 windows x86 arch:x86

    90ad4c2d87ff35db40a9463e6429468c


    Headers

    Imports

    Sections

  • FileKill/新云软件.url
    .url