Overview

overview

3

Static

static

3

3561712709...�].exe

windows7-x64

1

3561712709...�].exe

windows10-2004-x64

1

3561712709...�].vbs

windows7-x64

1

3561712709...�].vbs

windows10-2004-x64

1

3561712709...at.vbs

windows7-x64

1

3561712709...at.vbs

windows10-2004-x64

1

3561712709...�].exe

windows7-x64

1

3561712709...�].exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5660b99829829c68eaa9660db101fc9c

  • Size

    29KB

  • MD5

    5660b99829829c68eaa9660db101fc9c

  • SHA1

    04849ead6cb9d481397109ee9b3377639d496fde

  • SHA256

    e9b4a55f10a35cf429470f4ac84ceab89a5cc4e0e91bac44cfb080c97ef8e3f1

  • SHA512

    83ab308d3de28e6123aad9170be92ebc6f39d1c23f1d0b0e609c1c9248c9a62419694f6305c3044b68d1b00c87d12096e4f646987eb456aa71e57be0b31239b4

  • SSDEEP

    768:p30khdlZckcR8a+BAVubDwcCFJoSSm93dslwVBahFvhPS5K:d1uvRN+i0vF+o8bBWFvhaw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 5660b99829829c68eaa9660db101fc9c
    .rar
  • 3561712709/LanTalkServer/Lanchat.ico
  • 3561712709/LanTalkServer/MSSCCPRJ.SCC
  • 3561712709/LanTalkServer/师生对~1.log
  • 3561712709/LanTalkServer/师生对话[主机].exe
    .exe windows:4 windows x86 arch:x86

    54ea0c920631ab5b042a391a98c5553f


    Headers

    Imports

    Sections

  • 3561712709/LanTalkServer/师生对话[主机].frm
    .vbs
  • 3561712709/LanTalkServer/师生对话[主机].frx
  • 3561712709/LanTalkServer/师生对话[主机].vbp
  • 3561712709/LanTalkServer/师生对话[主机].vbw
  • 3561712709/LanTalkStudent/LanChat.frm
    .vbs
  • 3561712709/LanTalkStudent/LanChat.frx
  • 3561712709/LanTalkStudent/MSSCCPRJ.SCC
  • 3561712709/LanTalkStudent/师生对话[学生].DEP
  • 3561712709/LanTalkStudent/师生对话[学生].exe
    .exe windows:4 windows x86 arch:x86

    5caa5ae4996f4d2ec3160b8768e8b818


    Headers

    Imports

    Sections

  • 3561712709/LanTalkStudent/师生对话[学生].vbp
  • 3561712709/LanTalkStudent/师生对话[学生].vbw
  • 3561712709/下载说明.htm
    .html .js polyglot
  • 3561712709/说明.txt