General

  • Target

    476d83ee1e718c311854f0bcc719b97b

  • Size

    566KB

  • MD5

    476d83ee1e718c311854f0bcc719b97b

  • SHA1

    8fedf6460d08403bfa85c6e3b2807dfb6212da20

  • SHA256

    f5c297b6f07a928632105f732bac20f64bcee378ef8e8da1cc11a82e7b75e26e

  • SHA512

    c913f48bfd8b95ab19c3104d6ba6b348b5a9a36c8f8c18fca9c6e24a6bd64fd3ba3ad16c831b3a31f43caa83446aa5e23a70459536f15de759cecd305b0e6aaf

  • SSDEEP

    12288:bdOy/e/yeN69ZwG2s7K+ZTjVETEdKsogLZ+L3J+IXBCpuzq8D:R7YNNVJ0VEQd9oh3oIXBCpuVD

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 476d83ee1e718c311854f0bcc719b97b
    .rar
  • BHONLINE.exe
    .exe windows:4 windows x86 arch:x86

    5a566cc0049874f5a53c37d7404e1196


    Headers

    Imports

    Sections

  • BHVPN.exe
    .exe windows:4 windows x86 arch:x86

    8fbb990f4428ef80ebfe3a5dfcf7db43


    Headers

    Imports

    Sections

  • JisuSpeeds.ini
  • 使用指南.chm
    .chm
  • 新云软件.url
    .url
  • 极速网络测试工具.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 极速闪电l2tp(连接需要证书问题).reg
  • 连接不上运行本程序.bat