Overview

overview

3

Static

static

3

悠树侠�...ad.dll

windows7-x64

1

悠树侠�...ad.dll

windows10-2004-x64

1

悠树侠�...p1.dll

windows7-x64

1

悠树侠�...p1.dll

windows10-2004-x64

3

悠树侠�...PI.dll

windows7-x64

1

悠树侠�...PI.dll

windows10-2004-x64

1

悠树侠�...in.dll

windows7-x64

1

悠树侠�...in.dll

windows10-2004-x64

1

悠树侠�...xt.dll

windows7-x64

1

悠树侠�...xt.dll

windows10-2004-x64

1

悠树侠�...et.dll

windows7-x64

1

悠树侠�...et.dll

windows10-2004-x64

1

悠树侠�...ln.dll

windows7-x64

1

悠树侠�...ln.dll

windows10-2004-x64

1

悠树侠�...ll.dll

windows7-x64

1

悠树侠�...ll.dll

windows10-2004-x64

1

悠树侠�...Ex.dll

windows7-x64

1

悠树侠�...Ex.dll

windows10-2004-x64

1

悠树侠�....2.exe

windows7-x64

1

悠树侠�....2.exe

windows10-2004-x64

1

悠树侠�...��.url

windows7-x64

1

悠树侠�...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c0cf113bfaf859f22feac159e9e9e2fd

  • Size

    866KB

  • MD5

    c0cf113bfaf859f22feac159e9e9e2fd

  • SHA1

    c34b72304a7989a7e6c60bb325276a8079aea31b

  • SHA256

    62eeb92fc8c847fc20b9335b5150247875a61f9c0ff224719838ae11512a93be

  • SHA512

    afde78a7a89a2c5269201dc34b40526856c9ce802dcb3594f4e9b4540b69dd6fca2938db039a462bc8264ef6dd23db7c38179e512ef70df9a873ed37fef742bd

  • SSDEEP

    12288:3fGQjvidnYtr0ebF4xB4oEbjS2zFUBwqyF3V9pTvQX6uvEGfmKfGeyA9uDjdTeeU:+Yv+WA8F4fH2zOB7QpTkvSV6OjdTp8eA

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • c0cf113bfaf859f22feac159e9e9e2fd
    .rar
  • 悠树侠盗飞车命令一键输入软件/EThread.fne
    .dll windows:4 windows x86 arch:x86

    63cbf8bd20c1290cfab1ed83b71ea939


    Headers

    Imports

    Exports

    Sections

  • 悠树侠盗飞车命令一键输入软件/PZ.INI
  • 悠树侠盗飞车命令一键输入软件/dp1.fne
    .dll windows:4 windows x86 arch:x86

    f4b4bca30df7e9c871bbc7c4aade35c8


    Headers

    Imports

    Exports

    Sections

  • 悠树侠盗飞车命令一键输入软件/eAPI.fne
    .dll windows:4 windows x86 arch:x86

    a8ae28fb7870151eb1647d665ac5f31c


    Headers

    Imports

    Exports

    Sections

  • 悠树侠盗飞车命令一键输入软件/eSkin.fne
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • 悠树侠盗飞车命令一键输入软件/iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • 悠树侠盗飞车命令一键输入软件/internet.fne
    .dll windows:4 windows x86 arch:x86

    947a94c34d0476950a2cd72e8004382c


    Headers

    Imports

    Exports

    Sections

  • 悠树侠盗飞车命令一键输入软件/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • 悠树侠盗飞车命令一键输入软件/peizhi.ini
  • 悠树侠盗飞车命令一键输入软件/pf.skn
  • 悠树侠盗飞车命令一键输入软件/shell.fne
    .dll windows:4 windows x86 arch:x86

    982b55eb63f51858ab5dbdb343dfc3f3


    Headers

    Imports

    Exports

    Sections

  • 悠树侠盗飞车命令一键输入软件/shellEx.fne
    .dll windows:4 windows x86 arch:x86

    57d8c267f92579f0eedd02f56bfbc0c0


    Headers

    Imports

    Exports

    Sections

  • 悠树侠盗飞车命令一键输入软件/悠树侠盗飞车命令一键输入软件V1.2.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 悠树侠盗飞车命令一键输入软件/新云软件.url
    .url