Overview

overview

7

Static

static

7

U盘保护...el.dll

windows7-x64

7

U盘保护...el.dll

windows10-2004-x64

7

U盘保护...er.exe

windows7-x64

7

U盘保护...er.exe

windows10-2004-x64

7

U盘保护...ld.exe

windows7-x64

7

U盘保护...ld.exe

windows10-2004-x64

7

U盘保护...te.exe

windows7-x64

7

U盘保护...te.exe

windows10-2004-x64

7

U盘保护...ok.dll

windows7-x64

1

U盘保护...ok.dll

windows10-2004-x64

7

U盘保护...om.url

windows7-x64

1

U盘保护...om.url

windows10-2004-x64

1

U盘保护...��.url

windows7-x64

1

U盘保护...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    c621bff01f3c12eb2b4b00733d62f5ab

  • Size

    1.1MB

  • MD5

    c621bff01f3c12eb2b4b00733d62f5ab

  • SHA1

    85cb875e45e2853daf09dedc2d073143954d9c3c

  • SHA256

    999ca40856b8f64b3fad6012f9d01ae607da17866ef46df5d3ec072c20638f44

  • SHA512

    02e892117e26e82f8cdaf1ad279d6d23128387416c371a9a85a5563a1afe89a0b93963b78339acf86a2de1db16904a15e8b3f138aca3baa6bf41f7fdd3ec2408

  • SSDEEP

    24576:Vo+PsHy6wlIC6KcUDxbgwpKBppiERQk5QpAExS8tLAyVd2MA3hge:y+m+EUDxTpKB1QcaAmgmC3b

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • c621bff01f3c12eb2b4b00733d62f5ab
    .rar
  • U盘保护盾/Kernel.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • U盘保护盾/Scanner.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • U盘保护盾/USBShield.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • U盘保护盾/Update.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • U盘保护盾/hook.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • U盘保护盾/setting.ini
  • U盘保护盾/usbvir.db
  • U盘保护盾/vir.db
  • U盘保护盾/绿色先锋首页_greenxf.com.url
    .url
  • U盘保护盾/说明.txt
  • U盘保护盾/软件使用说明greenxf.com.txt
  • U盘保护盾/软件更新.url.url
    .url