General

  • Target

    63b1d8713bde28397a60f243c0514a63

  • Size

    2.5MB

  • MD5

    63b1d8713bde28397a60f243c0514a63

  • SHA1

    363b6394035a3d59d75bd90310aaabe01a8360f5

  • SHA256

    696c8083f19f19b1ccb43b260ee1ccb332c6bd9a967b735c5bff6803d4232b48

  • SHA512

    438f4ca8d0c1941cedd4c9d2597d8c4b7c47c9a5f42b26ba62834b2014e8c6032177c8d855597a6de6813427ab6d7272e1ad514ef991ea993a8d6599b0d3aa38

  • SSDEEP

    49152:j3wEBinwgl1XIA3rOTUhGBNAnuWc95qVKut:j7knwM1X1rOTU8jAnh4mt

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • 63b1d8713bde28397a60f243c0514a63
    .zip
  • qqsmfz_33lc.com/cfgdll.dll
    .dll windows:4 windows x86 arch:x86

    7da7bb12497bd01841f214157430bcd9


    Code Sign

    Headers

    Imports

    Sections

  • qqsmfz_33lc.com/plugin/FILE.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    a10a0592e6925a16bb3205010b141edd


    Headers

    Imports

    Exports

    Sections

  • qqsmfz_33lc.com/plugin/MLY_FTP.DLL
    .dll windows:4 windows x86 arch:x86

    bd9b2189a40f2711f7dee0c8505466d1


    Headers

    Imports

    Sections

  • qqsmfz_33lc.com/plugin/MSG.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    57aad26ca686d6b6792d67b488197bb4


    Headers

    Imports

    Exports

    Sections

  • qqsmfz_33lc.com/plugin/REGDLL.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    f076a1e4fbab4d2c4bccbdc4ea8a1b72


    Headers

    Imports

    Exports

    Sections

  • qqsmfz_33lc.com/plugin/SYS.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    8942c3e9159ff5e44b99b3b05f222dbe


    Headers

    Imports

    Exports

    Sections

  • qqsmfz_33lc.com/plugin/WEB.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    3bda4e16faafbd5c4a3fdaf434f98b0a


    Headers

    Imports

    Exports

    Sections

  • qqsmfz_33lc.com/plugin/WEB.ini
  • qqsmfz_33lc.com/plugin/WINDOW.DLL
    .dll regsvr32 windows:4 windows x86 arch:x86

    373d5028e508c59db830ece76ed6fd99


    Headers

    Imports

    Exports

    Sections

  • qqsmfz_33lc.com/uservar.ini
  • qqsmfz_33lc.com/使用说明.txt
  • qqsmfz_33lc.com/全球使命挂机发枪V.00.21版.exe
    .exe windows:4 windows x86 arch:x86

    68531ddee53ae043209f0743aefd5e19


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qqsmfz_33lc.com/全球使命挂机发枪V.00.21版.ini