Overview

overview

7

Static

static

3

znwb5807.exe

windows7-x64

5

znwb5807.exe

windows10-2004-x64

5

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

chenbfck.exe

windows7-x64

1

chenbfck.exe

windows10-2004-x64

1

chenbmxg.exe

windows7-x64

1

chenbmxg.exe

windows10-2004-x64

1

chencksz.exe

windows7-x64

1

chencksz.exe

windows10-2004-x64

1

chenhfck.exe

windows7-x64

1

chenhfck.exe

windows10-2004-x64

1

chenhu2.dll

windows7-x64

1

chenhu2.dll

windows10-2004-x64

1

chenhu4.dll

windows7-x64

1

chenhu4.dll

windows10-2004-x64

1

chenhu5.com

windows7-x64

chenhu5.com

windows10-2004-x64

chenxf.exe

windows7-x64

1

chenxf.exe

windows10-2004-x64

1

chenznwb.exe

windows7-x64

1

chenznwb.exe

windows10-2004-x64

1

chver.html

windows7-x64

1

chver.html

windows10-2004-x64

1

filet.html

windows7-x64

1

filet.html

windows10-2004-x64

1

uninst.exe

windows7-x64

7

uninst.exe

windows10-2004-x64

7

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    9a19a1059595689db06d117c4b0aa97f

  • Size

    994KB

  • MD5

    9a19a1059595689db06d117c4b0aa97f

  • SHA1

    c2d4d4ed87f652c6e8ea1f552e47872e2d4a0519

  • SHA256

    f67346966c9cbb7423123ed49ed727b9632b7d618c9a6fc06a1fe1bb737946f9

  • SHA512

    bd4f519501fb7eebe95854cce681d13b228c69942a0103d627e5f38be746460090c04ca2a0d4682c838b570a533b7866ff008051e935d4a57949ac7461b5ded9

  • SSDEEP

    24576:OfteiI7fe58P4irVHGhM00mI0Qy3nrBPsb9EtVyvv6:0IiIacrwi7y3ntOFa

Score
3/10

Malware Config

Signatures

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs
    installer

Files

  • 9a19a1059595689db06d117c4b0aa97f
    .rar
  • znwb5807.exe
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • big5hz.ov1
  • chen1.wav
  • chen2.wav
  • chenbfck.exe
    .exe windows:4 windows x86 arch:x86

    a1cfad95790962adda669fad8822c145


    Headers

    Imports

    Sections

  • chenbmxg.exe
    .exe windows:4 windows x86 arch:x86

    804d4bb129a0878f9e1ececf7639fb14


    Headers

    Imports

    Sections

  • chencksz.exe
    .exe windows:4 windows x86 arch:x86

    798f20650adeed436b50441dd0387ed0


    Headers

    Imports

    Sections

  • chencyzk.chh
  • chencyzk.txt
  • chendhz.chh
  • chendwdw.txt
  • chengbk.ovl
  • chenhfck.exe
    .exe windows:4 windows x86 arch:x86

    7fe6926658d6fb3ba0efb414d0e2d86d


    Headers

    Imports

    Sections

  • chenhu2.ime
    .dll windows:4 windows x86 arch:x86

    cf3a79eeb2fb878eb9dd96cd0d5597cf


    Headers

    Imports

    Exports

    Sections

  • chenhu4.ime
    .dll windows:4 windows x86 arch:x86

    cf3a79eeb2fb878eb9dd96cd0d5597cf


    Headers

    Imports

    Exports

    Sections

  • chenhu5.com
  • chenjfk.ov1
  • chenpymb.ov1
  • chenskfh.chh
  • chenszsj.chh
  • chenxf.exe
    .exe windows:4 windows x86 arch:x86

    77785f0d6d97db0c0200f36ce5f6be23


    Headers

    Imports

    Sections

  • chenynhz.txt
  • chenzdfh.chh
  • chenzdfh.txt
  • chenzdym.chh
  • chenzdym.txt
  • chenznwb.exe
    .exe windows:4 windows x86 arch:x86

    d77deaa37d3ed281d13b47744f41addc


    Headers

    Imports

    Sections

  • chfz0.bmp
  • chfz1.bmp
  • chfz2.bmp
  • chfz3.bmp
  • chfz4.bmp
  • chgbkbh.chh
  • chpyjm1.txt
  • chpykey0.txt
  • chpykey1.txt
  • chpykey2.txt
  • chpykey3.txt
  • chpykey4.txt
  • chpykey5.txt
  • chszsj01.chh
  • chszsj02.chh
  • chszsj03.chh
  • chszsj04.chh
  • chszsj43.chh
  • chszsj44.chh
  • chszsjpy.chh
  • chver.obj
    .html
  • chver.txt
  • chwbjm.txt
  • chword.chh
  • chznwb11.bmp
  • chznwb12.bmp
  • chznwb13.bmp
  • chznwb14.bmp
  • chznwb15.bmp
  • chznwb16.bmp
  • chznwb17.bmp
  • chznwb18.bmp
  • chznwb21.bmp
  • chznwb22.bmp
  • chznwb23.bmp
  • chznwb24.bmp
  • chznwb25.bmp
  • chznwb26.bmp
  • chznwb27.bmp
  • chznwb28.bmp
  • chznwb31.bmp
  • chznwb32.bmp
  • chznwb33.bmp
  • chznwb34.bmp
  • chznwb41.bmp
  • chznwb51.bmp
  • chznwb52.bmp
  • cwb.ov1
  • cwbzlcz1.txt
  • filet.dat
    .html
  • jfhzb.txt
  • pyqspmb.txt
  • softkey.txt
  • ssbl2.bmp
  • ssbl21.bmp
  • ssblc1.bmp
  • ssblc2.bmp
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    237a51742fed62d237b6f1b75452402f


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    4ec328f99bdd944fc98d8a5cf11f7a62


    Headers

    Imports

    Exports

    Sections

  • uwb.chh
  • znwb1.bmp
  • znwb2.bmp
  • 新云软件.url
    .url