Overview

overview

3

Static

static

3

ct/新云软件.url

windows7-x64

1

ct/新云软件.url

windows10-2004-x64

1

ct/蹭饭�...ib.dll

windows7-x64

1

ct/蹭饭�...ib.dll

windows10-2004-x64

1

ct/蹭饭�...ib.dll

windows7-x64

1

ct/蹭饭�...ib.dll

windows10-2004-x64

1

ct/蹭饭�...on.dll

windows7-x64

1

ct/蹭饭�...on.dll

windows10-2004-x64

1

ct/蹭饭�...ck.dll

windows7-x64

1

ct/蹭饭�...ck.dll

windows10-2004-x64

1

ct/蹭饭�...nt.dll

windows7-x64

1

ct/蹭饭�...nt.dll

windows10-2004-x64

1

ct/蹭饭�...ml.dll

windows7-x64

1

ct/蹭饭�...ml.dll

windows10-2004-x64

1

ct/蹭饭�...ne.exe

windows7-x64

1

ct/蹭饭�...ne.exe

windows10-2004-x64

3

ct/蹭饭�...et.dll

windows7-x64

1

ct/蹭饭�...et.dll

windows10-2004-x64

1

ct/蹭饭�...sg.htm

windows7-x64

1

ct/蹭饭�...sg.htm

windows10-2004-x64

1

ct/蹭饭�...05.dll

windows7-x64

1

ct/蹭饭�...05.dll

windows10-2004-x64

1

ct/蹭饭�...��.exe

windows7-x64

1

ct/蹭饭�...��.exe

windows10-2004-x64

1

ct/蹭饭�...��.exe

windows7-x64

1

ct/蹭饭�...��.exe

windows10-2004-x64

1

ct/蹭饭�...��.exe

windows7-x64

1

ct/蹭饭�...��.exe

windows10-2004-x64

1

ct/蹭饭�...��.exe

windows7-x64

1

ct/蹭饭�...��.exe

windows10-2004-x64

1

ct/蹭饭�...��.exe

windows7-x64

3

ct/蹭饭�...��.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    996b3f6bbae71ea7cc62b150f8b35b16

  • Size

    1.9MB

  • MD5

    996b3f6bbae71ea7cc62b150f8b35b16

  • SHA1

    478d64612456829e255add016c4dfdf1375fb4e8

  • SHA256

    f493628f2b38568037272b3eadeb9671cc8983cf87e45919262c74252c8e264b

  • SHA512

    9d3438077fede0da905cc8c7144b338268f7961fa2c2978beea6e935f83b28895559dd94cf192f29f9685aaa25e950dfb653565286bba7b3a6970d306f2acc0e

  • SSDEEP

    49152:KaI1Vx40CK842tKo2YPnt5EhwnqpCf82J0W8rEr9PW+1H:E1VyHNP2+t5EGnqpCfHv8rLYH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 14 IoCs

    Checks for missing Authenticode signature.

Files

  • 996b3f6bbae71ea7cc62b150f8b35b16
    .rar
  • ct/QQ餐厅小黑介绍.txt
  • ct/新云软件.url
    .url
  • ct/蹭饭小黑/AboutTime.ini
  • ct/蹭饭小黑/ICSharpCode.SharpZipLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ct/蹭饭小黑/Interop.QuartzTypeLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ct/蹭饭小黑/Jayrock.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ct/蹭饭小黑/Jayrock.dll
    .dll .js windows:4 windows x86 arch:x86 polyglot

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ct/蹭饭小黑/Jint.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ct/蹭饭小黑/Microsoft.mshtml.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ct/蹭饭小黑/UpdateOnline.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ct/蹭饭小黑/allCookie.data
  • ct/蹭饭小黑/config.ini
  • ct/蹭饭小黑/dish.xml
  • ct/蹭饭小黑/hall/1-5-10级摆法(雪狼提供）.htb
  • ct/蹭饭小黑/hall/1-8级11桌.htb
  • ct/蹭饭小黑/hall/1-8级9桌.htb
  • ct/蹭饭小黑/hall/10-15-20坐摆法《雪狼提供新》.htb
  • ct/蹭饭小黑/hall/10级满效率+超好看摆法.htb
  • ct/蹭饭小黑/hall/10级（黑山提供测试）.htb
  • ct/蹭饭小黑/hall/11级摆法（Tiny提供）.htb
  • ct/蹭饭小黑/hall/12J变态隐身传菜+叠桌+6装饰.htb
  • ct/蹭饭小黑/hall/12级满效率-雨儿.htb
  • ct/蹭饭小黑/hall/12级满效率.htb
  • ct/蹭饭小黑/hall/12级（悠然猪猪提供）.htb
  • ct/蹭饭小黑/hall/12级（黑山提供测试）.htb
  • ct/蹭饭小黑/hall/15.htb
  • ct/蹭饭小黑/hall/15张极速摆法.htb
  • ct/蹭饭小黑/hall/15级摆法.htb
  • ct/蹭饭小黑/hall/15级超级板块.htb
  • ct/蹭饭小黑/hall/17级极速13张桌子.htb
  • ct/蹭饭小黑/hall/18级模板.htb
  • ct/蹭饭小黑/hall/20级以上最效率《雪狼制作》.htb
  • ct/蹭饭小黑/hall/20级摆法经典.htb
  • ct/蹭饭小黑/hall/21级摆法.htb
  • ct/蹭饭小黑/hall/22级摆法.htb
  • ct/蹭饭小黑/hall/2c3f.htb
  • ct/蹭饭小黑/hall/3c4f.htb
  • ct/蹭饭小黑/hall/4级日历、.htb
  • ct/蹭饭小黑/hall/5级摆法（Tiny提供）.htb
  • ct/蹭饭小黑/hall/5级（可乐加冰提供）.htb
  • ct/蹭饭小黑/hall/6级极速 2C3F.htb
  • ct/蹭饭小黑/hall/7级极速无装饰 2C3F.htb
  • ct/蹭饭小黑/hall/7级超快隐身传菜.htb
  • ct/蹭饭小黑/hall/7级（忘＆忧@鲁）.htb
  • ct/蹭饭小黑/hall/8级2C3F无装饰.htb
  • ct/蹭饭小黑/hall/8级最佳摆法.htb
  • ct/蹭饭小黑/hall/9级.htb
  • ct/蹭饭小黑/hall/9级快速好看的摆法.htb
  • ct/蹭饭小黑/hall/9级隐身+超BT重叠.htb
  • ct/蹭饭小黑/hall/for-vi 10级.htb
  • ct/蹭饭小黑/hall/一字牌隐身传菜.htb
  • ct/蹭饭小黑/hall/变态+隐形.htb
  • ct/蹭饭小黑/hall/变态25张.htb
  • ct/蹭饭小黑/hall/变态叠桌摆法.htb
  • ct/蹭饭小黑/hall/咖啡精制22桌超强叠桌12格适用.htb
  • ct/蹭饭小黑/hall/咖啡精制超强叠桌13格适用.htb
  • ct/蹭饭小黑/hall/小基效率16张.htb
  • ct/蹭饭小黑/hall/摆法1_8级.htb
  • ct/蹭饭小黑/hall/摆法2_8级.htb
  • ct/蹭饭小黑/hall/新9级排法.htb
  • ct/蹭饭小黑/hall/极速21级摆法.htb
  • ct/蹭饭小黑/hall/终极30(7.7+7.5.4).htb
  • ct/蹭饭小黑/hall/蟲蟲13桌超速摆法.htb
  • ct/蹭饭小黑/hall/鬼手6级牛B摆法.htb
  • ct/蹭饭小黑/hall/１６级２１张桌子.htb
  • ct/蹭饭小黑/key.data
  • ct/蹭饭小黑/log4net.config
    .xml
  • ct/蹭饭小黑/log4net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ct/蹭饭小黑/logo/logo.gif
    .gif
  • ct/蹭饭小黑/mymsg.htm
    .html
  • ct/蹭饭小黑/skincrafter.net-vs2005.dll
    .dll windows:4 windows x86 arch:x86

    cc59c365bc885f06f0cee2d725f51cae


    Headers

    Imports

    Sections

  • ct/蹭饭小黑/system.gif
    .gif
  • ct/蹭饭小黑/对时软件.exe
    .exe windows:4 windows x86 arch:x86

    fab24e6236b944ad601e2f8dc6827a5c


    Headers

    Imports

    Sections

  • ct/蹭饭小黑/算法小黑-农场牧场餐厅算法检测工具.exe
    .exe windows:5 windows x86 arch:x86

    2ac4d6f9572a590593ca6d9c2cf01ae8


    Headers

    Imports

    Sections

  • ct/蹭饭小黑/蹭饭小黑.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ct/蹭饭小黑/蹭饭小黑.exe.config
    .xml
  • ct/蹭饭小黑/运行不了点击这文件.exe
    .exe windows:5 windows x86 arch:x86

    c32bbe9fc4a1294318cc1dd7b4d0eea3


    Headers

    Imports

    Sections

  • ct/蹭饭小黑/餐厅小黑-简化版.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • ct/运行不了请看.txt