Overview

overview

8

Static

static

3

360.cmd

windows7-x64

4

360.cmd

windows10-2004-x64

4

360SE.vbs

windows7-x64

3

360SE.vbs

windows10-2004-x64

7

361.cmd

windows7-x64

1

361.cmd

windows10-2004-x64

1

36OSE.vbs

windows7-x64

6

36OSE.vbs

windows10-2004-x64

7

36O安全�... 3.lnk

windows7-x64

3

36O安全�... 3.lnk

windows10-2004-x64

3

36O安全�...�3.lnk

windows7-x64

3

36O安全�...�3.lnk

windows10-2004-x64

3

Internet Exploror.lnk

windows7-x64

3

Internet Exploror.lnk

windows10-2004-x64

3

copy.cmd

windows7-x64

8

copy.cmd

windows10-2004-x64

8

cpa.cmd

windows7-x64

7

cpa.cmd

windows10-2004-x64

7

msn.exe

windows7-x64

7

msn.exe

windows10-2004-x64

7

runonce.cmd

windows7-x64

8

runonce.cmd

windows10-2004-x64

8

setup_free_7xdown.vbs

windows7-x64

8

setup_free_7xdown.vbs

windows10-2004-x64

8

tool.cmd

windows7-x64

7

tool.cmd

windows10-2004-x64

7

winare.vbs

windows7-x64

1

winare.vbs

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    574bfa261997e385499206047956cacd

  • Size

    300KB

  • MD5

    574bfa261997e385499206047956cacd

  • SHA1

    d367a5855dde9c15cab8c0112bc146295056165d

  • SHA256

    3ea1ae0d879d45f058b95d9ed9f52f120bdb328c38f9f07333c1f667615e47b8

  • SHA512

    02dd3305e44ba08c64341555bd28926c60f7b683867aa434faeed3f72b87629bbfa1bffa7b0a6cf219afcfbbc8c984bc18795450f0ececb09509a03617d242dc

  • SSDEEP

    6144:YuaufWG7JbsQ4H5q1CLB0Gc/sHlE6SwycrheRY0lOTUngA:uufWG72QhmTfHlxSwrTs3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 574bfa261997e385499206047956cacd
    .rar
  • 360.cmd
  • 360SE.vbs
    .vbs
  • 361.cmd
  • 36OSE.vbs
    .vbs
  • 36O安全刘览器 3.lnk
    .lnk
  • 36O安全刘览器3.lnk
    .lnk
  • Internet Exploror.lnk
    .lnk
  • copy.cmd
  • cpa.cmd
  • msn.exe
    .exe windows:4 windows x86 arch:x86

    ccc0e829fe1206cd39d147ca374725d4


    Headers

    Imports

    Sections

  • runonce.cmd
  • setup_free_7xdown.vbs
    .vbs
  • tool.cmd
  • winare.vbs
    .vbs