General
-
Target
b52ee4d3558942d62cefd3c39e5a6680
-
Size
1.9MB
-
Sample
240305-vdhfaace62
-
MD5
b52ee4d3558942d62cefd3c39e5a6680
-
SHA1
008d104dbb7562a4954cc31c3d779cb21fbe5914
-
SHA256
6273d0d3bcdd9f880c3da07b970fe34bf6f002f3fb8712e8162b980899bd69f8
-
SHA512
9ec8627f71c71f6a19393de9768498603a5ce948b6c83cfda664fd795fdfec90566e0978cc023633a016c529f9e82a5d3269e36df493be0870c14f33b01b4112
-
SSDEEP
49152:FE/oV6Umm3K1/e4r/jd8Co51hI1Zp75G+:FE/c53KH/jdGX+1zFG+
Malware Config
Targets
-
-
Target
HongYan.exe
-
Size
1.1MB
-
MD5
c893c6aa17c70a05d2877c55d3053f74
-
SHA1
1de1e35feec80288c3d61008fc5ceba07a135529
-
SHA256
19f803cd7e9a91fabe66bc9ad084a3b97885636dcf3223b2acf4fd77670d8f66
-
SHA512
19c61412cb1af1b9749e246a77031cb1dae1fdbd450c95b758bc51f353912a88452b1b400cb57634a764396c4250c869e1a25b01e95b7f05006176a1fa897d06
-
SSDEEP
24576:fFZqhOBnVyK23C6OoYMLiVcKtVx4MiuzOMdHgVdzQ5vfcvElBOMm8:fFOOLWSor2VcKbxaYhc9Q58+jm8
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
-
-
Target
新云软件.url
-
Size
133B
-
MD5
4f0017b3b346bd0626f0c3b915e6e734
-
SHA1
823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
-
SHA256
df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
-
SHA512
0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score1/10 -
-
-
Target
鸿言文章创作系统.exe
-
Size
235KB
-
MD5
4d95dbf71ad414c86c6f99092ddf86c3
-
SHA1
b65011e88bfd4889580fe9c98b36911393a27c4e
-
SHA256
dc41e5f8de4496016a9bf5701d3f66dc608672b4f8adfed2d4cec7930f3cb251
-
SHA512
0ba99b079f1a7b53a5ee163e29b6c782aa16b795f4599c21c1509eae49df98e44f62723b7e898151a8cdecef43e83ddec3cd0a133bda2fbcb6ea4656ef086e4d
-
SSDEEP
6144:CAFTTkxGh4ymXclAGHxenC33/dLlokBengRRVEMIMLyM:CAFTT2GrmXWSSL6HngRntLV
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-