Overview

overview

6

Static

static

3

!)卸载.bat

windows7-x64

1

!)卸载.bat

windows10-2004-x64

1

!)绿化.bat

windows7-x64

1

!)绿化.bat

windows10-2004-x64

1

SSubTmr6.dll

windows7-x64

1

SSubTmr6.dll

windows10-2004-x64

1

fldrvw71.dll

windows7-x64

1

fldrvw71.dll

windows10-2004-x64

1

help.chm

windows7-x64

1

help.chm

windows10-2004-x64

1

shlobj71.dll

windows7-x64

1

shlobj71.dll

windows10-2004-x64

1

srck.exe

windows7-x64

6

srck.exe

windows10-2004-x64

3

srieh.exe

windows7-x64

6

srieh.exe

windows10-2004-x64

1

vbalExpBar6.dll

windows7-x64

1

vbalExpBar6.dll

windows10-2004-x64

1

vbalIml6.dll

windows7-x64

1

vbalIml6.dll

windows10-2004-x64

1

安装说明.url

windows7-x64

1

安装说明.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    ab27b748113b9ded8d2ac9fed6cf9568

  • Size

    2.3MB

  • MD5

    ab27b748113b9ded8d2ac9fed6cf9568

  • SHA1

    67a510bc4327b26ead3444c157f785c943c6f28d

  • SHA256

    af8744eab6b276f10420c8a9f9c9720c28e1ddb9e6b2b78a93ea58f48d7ba3bb

  • SHA512

    aa74bcc89a46d43d222dc6a102e0495e979f9592e0d3ba27cdbcc1764cefad420e526d0a4565646dfda991f337a01b6c92799379b418d66ad7272375496a915c

  • SSDEEP

    49152:KrXcLRO8vtZ3k2xWcCVXRvcTFAl5MzgRLQ837Q4CdLmM5:KrUTtZ3k2xWT6FFg5QcE44ik

Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • ab27b748113b9ded8d2ac9fed6cf9568
    .rar
  • !)卸载.bat
  • !)绿化.bat
  • SSubTmr6.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    eddcb3d633deafc33cd6cdf5d519f2e0


    Headers

    Imports

    Exports

    Sections

  • fldrvw71.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    fa348d423e3784d355fd54087c8cd402


    Headers

    Imports

    Exports

    Sections

  • help.chm
    .chm
  • shlobj71.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    2a3635438005b443f8b86eb59ec56b48


    Headers

    Imports

    Exports

    Sections

  • srck.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • srieh.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • vbalExpBar6.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    8ac94e19973622da9cfb236dbba85547


    Headers

    Imports

    Exports

    Sections

  • vbalIml6.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    4762f9bedcf7dcd7ab0927a4256f5a09


    Headers

    Imports

    Exports

    Sections

  • 安装说明.url
    .url