Overview

overview

7

Static

static

7

92wg在线...��.url

windows7-x64

1

92wg在线...��.url

windows10-2004-x64

1

ztqdq.exe

windows7-x64

7

ztqdq.exe

windows10-2004-x64

1

就爱外挂网.htm

windows7-x64

1

就爱外挂网.htm

windows10-2004-x64

1

征途启�...��.exe

windows7-x64

7

征途启�...��.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    cc040dc29203b3517911366c0ea5157b

  • Size

    2.1MB

  • MD5

    cc040dc29203b3517911366c0ea5157b

  • SHA1

    d2de3671a2e4f696b01479d358ec8bd445dae021

  • SHA256

    5c236497af162e1cd266fc498253fc6e25eeae3214e7fd771e1083932f9ac38e

  • SHA512

    e08f4f032aa95dc2a4fe14530f486599eaeda81b2055767c704cff5d5cbbf35a7b5e53e54b9473ac958b438d376739bb6d1c2ab52125b76cf9b04238413a397e

  • SSDEEP

    49152:FVAgMPdQNhzcq0tSsoEEFjBt5Yc4u+4nPc8nHkbXDJ:FVlDhzcq0QsoEERFyOnPEDl

Score
7/10
themida

Malware Config

Signatures

  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cc040dc29203b3517911366c0ea5157b
    .rar
  • 92wg在线购买外挂卡.url
  • 92wg说明.txt
  • Setup.ini
  • SrvList.ini
  • ztqdq.dat
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 区数据.ini
  • 启动器说明.txt
  • 就爱外挂网.htm
    .html
  • 征途启动器112-穿怪.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 账号文件演示1.zh
  • 账号文件演示2.zh