Overview
overview
7Static
static
7菜鸟一�...ak.exe
windows7-x64
1菜鸟一�...ak.exe
windows10-2004-x64
1菜鸟一�...xt.dll
windows7-x64
1菜鸟一�...xt.dll
windows10-2004-x64
3菜鸟一�...ln.dll
windows7-x64
1菜鸟一�...ln.dll
windows10-2004-x64
1菜鸟一�...ll.dll
windows7-x64
1菜鸟一�...ll.dll
windows10-2004-x64
1菜鸟一�...ib.dll
windows7-x64
1菜鸟一�...ib.dll
windows10-2004-x64
1菜鸟一�...��.url
windows7-x64
1菜鸟一�...��.url
windows10-2004-x64
1General
-
Target
b241d5318871f75dbc14d48bd477cd34
-
Size
3.1MB
-
Sample
240304-qv24ssbd9s
-
MD5
b241d5318871f75dbc14d48bd477cd34
-
SHA1
cefb4a183e85f87bca10b214ee980ac3a1138456
-
SHA256
4c386fc59afb384219544d01fd9b541e151e89102be28f067b23aec448a8b393
-
SHA512
7eeeb44b19eaa2f0643859c206121127f3453ac70c9d1229d47aa9a4f4dd01c04dea4014a4616be74ed53d73886e9def459f89d130370006e33c9b49ff6548ac
-
SSDEEP
98304:kQckgTXj0rWo8bJL2qA9khIoyxBfUSo/zyV16:fg3oMJ/AuWo8BfUD7gY
Behavioral task
behavioral1
Sample
菜鸟一键还原软件/cnbak.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
菜鸟一键还原软件/cnbak.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
菜鸟一键还原软件/iext.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
菜鸟一键还原软件/iext.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
菜鸟一键还原软件/krnln.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
菜鸟一键还原软件/krnln.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
菜鸟一键还原软件/shell.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
菜鸟一键还原软件/shell.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
菜鸟一键还原软件/xplib.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
菜鸟一键还原软件/xplib.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
菜鸟一键还原软件/新云软件.url
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
菜鸟一键还原软件/新云软件.url
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
菜鸟一键还原软件/cnbak.exe
-
Size
2.5MB
-
MD5
9b0d771e095c0ac883a2ebc3c52bfbad
-
SHA1
3e12928f0407639ceb396bfee33317d0378b8b89
-
SHA256
d52dc20bc1d2c683d9b8c068853d1f2d9f0088f6fa9e9e395276a2e606ab209b
-
SHA512
b27fac222c07f7feabff01703ca37eeeab0abe9da9c56d4ebeb781f1a3d57d18ab63688ebe833a15e5ba9818cc8fefd811ea90f864de74e8eeafb50c704364ca
-
SSDEEP
49152:TunZAaZG15FGs1FNCorD0LlTyqbODu9MIa4oO0F:yZ90fJypyqaDEMztL
Score1/10 -
-
-
Target
菜鸟一键还原软件/iext.fnr
-
Size
119KB
-
MD5
a7cf68d73ba2c4ddc884fc90d4cd144d
-
SHA1
aa41393e8074e9ce9e796ae4529de9c5ab6bbea4
-
SHA256
8fb5d06ef730f4e5662bf447c35057d761ef2fe55e13a5dc37d4751010764830
-
SHA512
93c8494ed35edc526cb60cb4a495ea92cfd1b5574c32da989164c1f7d01550fb4aac46c52b1dcdf2c4685110fc184264a96155caa3f9598bbba9173ff2347926
-
SSDEEP
3072:MXZuXbkZHyiGFoBo51XxR7zoG5N4bqtk:MXZR/RBofrxD
Score3/10 -
-
-
Target
菜鸟一键还原软件/krnln.fnr
-
Size
1.0MB
-
MD5
7a83f3e147cbef13b24b23e9ea46c1c4
-
SHA1
c7f71c793927122b14377fb37bf787ac4ee45406
-
SHA256
6db2536f53fa8d38ee791e1058c071d70aa860d0d3f51a6b681b713153586136
-
SHA512
8ee7abbffcfc4c52478db7a1a5d3bb5832abf0cb36e474a70323fba0e96cc7dad0ee20d97299fed38751fa9cd9c97707ee2cc9fcd8d71a640e0c5f9b71fc0872
-
SSDEEP
24576:mJAgEpfzBni6tODI+RISW6IvWIfepEX7dtEEEEWEaEbd:m6gEpbBDx+RISWJ/X7rd
Score1/10 -
-
-
Target
菜鸟一键还原软件/shell.fne
-
Size
36KB
-
MD5
01a3102d881cf7d6964738d4cab5a987
-
SHA1
0dc22d6112216e5bb833a871ff56ca6bb192481b
-
SHA256
2554a40299c69449574f277881309ecc59e15b1086621984df8db92e5401cb1a
-
SHA512
ec2831f99c2ce9fd4189b834c0259e6b4d8597259c92f002daf15d643cd145fc55e17f31450ef9472568d20db5e85bf102d19de2f991ed2f685dce8c7c552dda
-
SSDEEP
768:KlJt5SGkTR/rBmjThmA7wHnuGQuPwzQEbP/Jn67azT7:rgp9/GQ/zQEbJnrT7
Score1/10 -
-
-
Target
菜鸟一键还原软件/xplib.fne
-
Size
44KB
-
MD5
42b2b31c7bcfa78ce4c9b6a5774b13d3
-
SHA1
adf05e17dee611483953c05e1fc773de21069b6e
-
SHA256
ee1b367fac5bb8b974d0c3ac84711d420efb0d2e7815122891be9406f1033859
-
SHA512
79d3486f90c9cee653ab4e75a5a627de6d0fef990cfca8cd471aae830d4bf6593910bbc318792227388756e772e6bbb61aa0c6946a535bca99b57aeb141329b1
-
SSDEEP
768:8aN5cLRdtjnf4+BvrtgQTQmrm9v8ni5Cu3Sob+q:3NqLRdtjnuQTQmq9kiaoT
Score1/10 -
-
-
Target
菜鸟一键还原软件/新云软件.url
-
Size
133B
-
MD5
4f0017b3b346bd0626f0c3b915e6e734
-
SHA1
823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
-
SHA256
df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
-
SHA512
0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score1/10 -