Overview

overview

7

Static

static

3

155绿色�...��.url

windows7-x64

1

155绿色�...��.url

windows10-2004-x64

1

AutoFireWall.exe

windows7-x64

1

AutoFireWall.exe

windows10-2004-x64

1

RemoveDevice.dll

windows7-x64

1

RemoveDevice.dll

windows10-2004-x64

3

SinoCopy.exe

windows7-x64

1

SinoCopy.exe

windows10-2004-x64

1

SinoHook.dll

windows7-x64

1

SinoHook.dll

windows10-2004-x64

1

SinoHttp.dll

windows7-x64

3

SinoHttp.dll

windows10-2004-x64

3

SinoLanguage.dll

windows7-x64

1

SinoLanguage.dll

windows10-2004-x64

1

SinoUpdate.exe

windows7-x64

3

SinoUpdate.exe

windows10-2004-x64

7

SkinPPWTL.dll

windows7-x64

1

SkinPPWTL.dll

windows10-2004-x64

1

VirusDef.dll

windows7-x64

1

VirusDef.dll

windows10-2004-x64

3

[AFW]UserGuider.chm

windows7-x64

1

[AFW]UserGuider.chm

windows10-2004-x64

1

[AFW]使用說明.chm

windows7-x64

1

[AFW]使用說明.chm

windows10-2004-x64

1

[AFW]使用说明.chm

windows7-x64

1

[AFW]使用说明.chm

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    b90e3644fe316780e2af28800e319698

  • Size

    2.2MB

  • MD5

    b90e3644fe316780e2af28800e319698

  • SHA1

    30002e3c3a72537d8c20c6b6462d87b37234500e

  • SHA256

    47346162a96be838d181163a1e189893ef1523769c675c5ccde42e9006075c4d

  • SHA512

    db3097688f6c3a964cc2c8d5ddc9f89094c17ae81aabd80bdb8321d5f404e899526c30696d20ee80283c1bdc5a23921ef3eaeb2118391c08805d1298ccb99466

  • SSDEEP

    49152:VtvHEjDOWm0xm3f5PL7ONzza3Bf89TDCZSOdtA7:VtvHEfOWmimVmxWkDCAOdq7

Score
3/10

Malware Config

Signatures

  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • b90e3644fe316780e2af28800e319698
    .rar
  • 155绿色软件站.url
    .url
  • AlphaOS.ssk
  • AquaOS.ssk
  • AutoFireWall.exe
    .exe windows:4 windows x86 arch:x86

    6b143b5c8ea4f0b94cb86309bdc8bac8


    Headers

    Imports

    Sections

  • AutoWarn.wav
  • Devoir.ssk
  • Dogmax.ssk
  • Dogmax2.ssk
  • FauxS-Toon.ssk
  • Language.ini
  • RedCopper.ssk
  • RemoveDevice.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • SinoCopy.exe
    .exe windows:4 windows x86 arch:x86

    a06648525b64579f0e50afd5444e6852


    Headers

    Imports

    Sections

  • SinoHook.dll
    .dll windows:4 windows x86 arch:x86

    6cba59b39c434c02762a3adc70af6337


    Headers

    Imports

    Exports

    Sections

  • SinoHttp.dll
    .dll windows:4 windows x86 arch:x86

    eaacf09a5630e0703fdb7d9cac9c744e


    Headers

    Imports

    Exports

    Sections

  • SinoLanguage.dll
    .dll windows:4 windows x86 arch:x86

    18f804254730c7b0d2a2ae50928a7540


    Headers

    Imports

    Exports

    Sections

  • SinoUpdate.exe
    .exe windows:4 windows x86 arch:x86

    195b481dddbe644ee7b862463bb6ab1f


    Headers

    Imports

    Sections

  • SkinPPWTL.dll
    .dll windows:4 windows x86 arch:x86

    8415b02065effcf3e8ba3b1c65054435


    Headers

    Imports

    Exports

    Sections

  • Spring.ssk
  • VirusDef.dll
    .dll windows:4 windows x86 arch:x86

    410f828dcd69df72bf449d94b5ceba77


    Headers

    Imports

    Exports

    Sections

  • XP-Home.ssk
  • [AFW]UpdateKeys.txt
  • [AFW]UserGuider.chm
    .chm
  • [AFW]使用說明.chm
    .chm
  • [AFW]使用说明.chm
    .chm
  • [AFW]更新說明.txt
  • [AFW]更新说明.txt