Overview

overview

7

Static

static

7

服务端/...d4.exe

windows7-x64

7

服务端/...d4.exe

windows10-2004-x64

7

用户端/setup69.exe

windows7-x64

7

用户端/setup69.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    48754c73cb8687668f9094b5a1971196

  • Size

    3.1MB

  • MD5

    48754c73cb8687668f9094b5a1971196

  • SHA1

    f5cdcee39f18998a8f95b9baaebbc6d0bc023be4

  • SHA256

    8b57f633610109a738fa7bdfb1748e4b9425814f534849ce4475abd1a75a4df3

  • SHA512

    fcfe13de25ca5a2a5b2b2e4e0b51834b9fae559ae6b8c1017ea3ae2ccbf2533afc4bef5681a02836a4eaff4875999616548d3d6bc0a1a5eeb310eb1dfa1b9621

  • SSDEEP

    98304:hQhXpTAcjooDxHxl+XqPNmG2Rg9IaDaGSrHFY1xVX:EXKOFxREXqPNIwS7FsVX

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 48754c73cb8687668f9094b5a1971196
    .rar
  • 下载说明.htm
    .html .js polyglot
  • 升级说明.txt
  • 服务端/libcard4.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 服务端/下载说明.htm
    .html .js polyglot
  • 用户端/setup69.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 用户端/下载说明.htm
    .html .js polyglot
  • 用户端/用户端直接运行安装程序.txt