Overview

overview

8

Static

static

8

Hybackup6.0.0.exe

windows7-x64

1

Hybackup6.0.0.exe

windows10-2004-x64

1

hyhelp/howdo.htm

windows7-x64

1

hyhelp/howdo.htm

windows10-2004-x64

1

hyhelp/postbuy.doc

windows7-x64

4

hyhelp/postbuy.doc

windows10-2004-x64

1

我们的主页.url

windows7-x64

1

我们的主页.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d81b45b0837ffc94534c3f7fc84ec0f4

  • Size

    603KB

  • MD5

    d81b45b0837ffc94534c3f7fc84ec0f4

  • SHA1

    afe1fd794beec5a228bb5387efe54dc14de66ec1

  • SHA256

    d386075cd9644ae405747cc27199d537e448b59bffb123e267fa9e324da271fe

  • SHA512

    2c7f7794e3d0dc13a7a7c8245132fc1f43ce868cc6a338f60ee1ae0cd4021bbbf2f9364f9c129f5c87a72ce43dd2f76c8f7645d4e46d98e77aa9926cf5c79c5d

  • SSDEEP

    12288:8tsy+av7fZBw3VHoLJID2Tcn27x4rKXXdIWb9jMchSKujGU/r:efv7fZa8un/GXttjbhSKw/r

Score
8/10
aspackv2macroxlm

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with 4.0 macros.

    macroxlm
  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d81b45b0837ffc94534c3f7fc84ec0f4
    .rar
  • Hybackup6.0.0.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • hyhelp/howdo.htm
    .html
  • hyhelp/postbuy.doc
    .doc windows office2003
  • hyhelp/下载说明.htm
    .html .js polyglot
  • 下载说明.htm
    .html .js polyglot
  • 如何解决新老版本数据不兼容的问题.txt
  • 我们的主页.url
  • 软件注册方法.txt
  • 软件说明.txt