Overview

overview

7

Static

static

7

电脑用�...ad.dll

windows7-x64

1

电脑用�...ad.dll

windows10-2004-x64

1

电脑用�...p1.dll

windows7-x64

1

电脑用�...p1.dll

windows10-2004-x64

1

电脑用�...PI.dll

windows7-x64

1

电脑用�...PI.dll

windows10-2004-x64

1

电脑用�...ip.dll

windows7-x64

3

电脑用�...ip.dll

windows10-2004-x64

1

电脑用�...xt.dll

windows7-x64

1

电脑用�...xt.dll

windows10-2004-x64

1

电脑用�...t2.dll

windows7-x64

1

电脑用�...t2.dll

windows10-2004-x64

1

电脑用�...t3.dll

windows7-x64

1

电脑用�...t3.dll

windows10-2004-x64

1

电脑用�...t5.dll

windows7-x64

1

电脑用�...t5.dll

windows10-2004-x64

1

电脑用�...ln.dll

windows7-x64

1

电脑用�...ln.dll

windows10-2004-x64

1

电脑用�...rl.dll

windows7-x64

3

电脑用�...rl.dll

windows10-2004-x64

3

电脑用�...p3.dll

windows7-x64

1

电脑用�...p3.dll

windows10-2004-x64

3

电脑用�...ll.dll

windows7-x64

1

电脑用�...ll.dll

windows10-2004-x64

1

电脑用�...Ex.dll

windows7-x64

1

电脑用�...Ex.dll

windows10-2004-x64

1

电脑用�...ec.dll

windows7-x64

1

电脑用�...ec.dll

windows10-2004-x64

1

电脑用�...��.exe

windows7-x64

7

电脑用�...��.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    a961cd91089029cbc9a02eded4192c976eed84acb8876726f1d2f6bd1e3a9a47

  • Size

    4.4MB

  • MD5

    715465a04a537a52f7fbb1d434faf2bf

  • SHA1

    911f8c5b32cca81761f1b353a61edaf8a613540a

  • SHA256

    a961cd91089029cbc9a02eded4192c976eed84acb8876726f1d2f6bd1e3a9a47

  • SHA512

    14aa45714d13acc1273c6476e3838ea94cb1d40781dc980894678ef055072d675865128a0fd20e66d75eae6075d4a2b7db4426e818fba75197e5d68d8690fb5a

  • SSDEEP

    98304:Zv9LjyLo+DPTRseqt5Fo7EUCoZJT8BgxnwJ4orh9oHGGw4KTHg:ZhuxhNqoPZlbxwJ4orh9c2s

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

Files

  • a961cd91089029cbc9a02eded4192c976eed84acb8876726f1d2f6bd1e3a9a47
    .zip
  • 电脑用户端/lib/EThread.fne
    .dll windows:4 windows x86 arch:x86

    63cbf8bd20c1290cfab1ed83b71ea939


    Headers

    Imports

    Exports

    Sections

  • 电脑用户端/lib/client
  • 电脑用户端/lib/client2.epk
  • 电脑用户端/lib/dp1.fne
    .dll windows:4 windows x86 arch:x86

    f4b4bca30df7e9c871bbc7c4aade35c8


    Headers

    Imports

    Exports

    Sections

  • 电脑用户端/lib/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    c0c83ce3c8933e771c5efabbc1925abb


    Headers

    Imports

    Exports

    Sections

  • 电脑用户端/lib/gzip.dll
    .dll windows:5 windows x86 arch:x86

    808ef01b1df8ccc7e620508eacbf5713


    Headers

    Imports

    Exports

    Sections

  • 电脑用户端/lib/iext.fnr
    .dll windows:4 windows x86 arch:x86

    08cfcb998694241d9af66cc88c7cb611


    Headers

    Imports

    Exports

    Sections

  • 电脑用户端/lib/iext2.fne
    .dll windows:4 windows x86 arch:x86

    7286ba50216c69a37eae6422826c4a4f


    Headers

    Imports

    Exports

    Sections

  • 电脑用户端/lib/iext3.fne
    .dll windows:4 windows x86 arch:x86

    1dd721c3be203efd60888ee963d55a91


    Headers

    Imports

    Exports

    Sections

  • 电脑用户端/lib/iext5.fne
    .dll windows:4 windows x86 arch:x86

    2cc11dbc00e8912d9e9e4d405d729709


    Headers

    Imports

    Exports

    Sections

  • 电脑用户端/lib/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    260506ac03052372277091974eead8e8


    Headers

    Imports

    Exports

    Sections

  • 电脑用户端/lib/libcurl.dll
    .dll windows:5 windows x86 arch:x86

    6a46308ac7cb7c3a76107ad5d5f013c4


    Headers

    Imports

    Exports

    Sections

  • 电脑用户端/lib/message.mp3
  • 电脑用户端/lib/mp3.run
    .dll windows:4 windows x86 arch:x86

    0d8883fcd2ea3109e5c236a22c15dac3


    Headers

    Imports

    Exports

    Sections

  • 电脑用户端/lib/shell.fne
    .dll windows:4 windows x86 arch:x86

    982b55eb63f51858ab5dbdb343dfc3f3


    Headers

    Imports

    Exports

    Sections

  • 电脑用户端/lib/shellEx.fne
    .dll windows:4 windows x86 arch:x86

    57d8c267f92579f0eedd02f56bfbc0c0


    Headers

    Imports

    Exports

    Sections

  • 电脑用户端/lib/spec.fne
    .dll windows:4 windows x86 arch:x86

    44912959aafe04feb6a5e77ff70ccd33


    Headers

    Imports

    Exports

    Sections

  • 电脑用户端/电脑用户端.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 电脑用户端/请把所有文件解压到一个目录下打开，注册时请对号入座，否则可能造成功能不可用.txt