Overview

overview

7

Static

static

4

setup.exe

windows7-x64

7

setup.exe

windows10-2004-x64

7

切克工�...��.doc

windows7-x64

4

切克工�...��.doc

windows10-2004-x64

1

切克工�...��.pdf

windows7-x64

1

切克工�...��.pdf

windows10-2004-x64

1

切克工�...��.doc

windows7-x64

4

切克工�...��.doc

windows10-2004-x64

1

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    478712e0300d47a68acfbbbc9a59fc63

  • Size

    19.5MB

  • MD5

    478712e0300d47a68acfbbbc9a59fc63

  • SHA1

    0fd7ae208dfaa2d9df358e58c7631859324b86e1

  • SHA256

    5363dcbfa692c663bd01ce359e6c65969c3cc170dbd6bb2994a100d01b2899fe

  • SHA512

    71e42ed08132346865d47b6312612b4133d1ae8f0105500f2c2a056d8a1faeb616a4f663c23965239ad7afc958d7d6ed703432366c204dee1cb30ebbf8c31389

  • SSDEEP

    393216:8hoFPIPq8KVTnC6JsaqGjbC7+DN1N8kcBVddJuwT12RJ/jXAenx61BSRBGSeGP:mgGqHTRe7MaxVnFs8ex6nSSSeGP

Score
4/10
pdflink

Malware Config

Signatures

  • HTTP links in PDF interactive object 1 IoCs

    Detects HTTP links in interactive objects within PDF files.

    pdflink
  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

    pdflink
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 478712e0300d47a68acfbbbc9a59fc63
    .rar
  • setup.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • 切克工资查询系统v3用户使用手册.doc
    .doc windows office2003
  • 切克工资查询系统v3用户使用手册.pdf
    .pdf

    • http://www.ccheck.cn/

    • http://www.ccheck.cn/dofile/down.asp

    • http://www.ccheck.cn/dofile/Ccheck-SC-306-Trail-IIS.rar

    • http://www.ccheck.cn/dofile/Ccheck-SC-306-Trail.rar

    • http://127.0.0.1/

    • http://localhost/

    • http://127.0.0.1/Ccheck-SC-Trail

    • http://localhost/Ccheck-SC-Trail

    • http://www.ccheck.cn/Product/Ck305/Doc/�û���׼����

    • Show all
  • 切克工资查询系统介绍.doc
    .doc windows office2003
  • 安装说明.txt
  • 新云软件.url
    .url