Overview

overview

3

Static

static

3

幽灵网�...xt.dll

windows7-x64

1

幽灵网�...xt.dll

windows10-2004-x64

1

幽灵网�...ln.dll

windows7-x64

1

幽灵网�...ln.dll

windows10-2004-x64

1

幽灵网�...in.dll

windows7-x64

1

幽灵网�...in.dll

windows10-2004-x64

1

幽灵网�...fo.dll

windows7-x64

1

幽灵网�...fo.dll

windows10-2004-x64

1

幽灵网�...ck.dll

windows7-x64

3

幽灵网�...ck.dll

windows10-2004-x64

1

幽灵网�...fo.dll

windows7-x64

1

幽灵网�...fo.dll

windows10-2004-x64

1

幽灵网�...sk.dll

windows7-x64

1

幽灵网�...sk.dll

windows10-2004-x64

1

幽灵网�...ss.dll

windows7-x64

1

幽灵网�...ss.dll

windows10-2004-x64

1

幽灵网�...gr.dll

windows7-x64

1

幽灵网�...gr.dll

windows10-2004-x64

1

幽灵网�...et.dll

windows7-x64

1

幽灵网�...et.dll

windows10-2004-x64

1

幽灵网�...em.dll

windows7-x64

1

幽灵网�...em.dll

windows10-2004-x64

1

幽灵网�...ok.dll

windows7-x64

1

幽灵网�...ok.dll

windows10-2004-x64

1

幽灵网�...rs.dll

windows7-x64

1

幽灵网�...rs.dll

windows10-2004-x64

1

幽灵网�...ok.dll

windows7-x64

1

幽灵网�...ok.dll

windows10-2004-x64

3

幽灵网�...st.exe

windows7-x64

1

幽灵网�...st.exe

windows10-2004-x64

1

幽灵网�...an.dll

windows7-x64

1

幽灵网�...an.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    df23f6af02eff6a266b813848478f308

  • Size

    719KB

  • MD5

    df23f6af02eff6a266b813848478f308

  • SHA1

    040b57444661d6d3cf75d37373ee11a747e68d54

  • SHA256

    39dc42f98929433abdb329fe1ec79bd85e9cb57de24ff01d08545dc299c80a05

  • SHA512

    9babda4fce0099cb9f0c85f6e6616bfab625aed0632d494e02e91143152d69cfefa0284a41ef087e0171f1df94ee8e5c36f94c19fb65c966ff7abb284c8c41de

  • SSDEEP

    12288:jJfICgQ+1YTkFdCbz9TxXXcLrziON04bjfUKjW0xGc88jLUI97YqiCKfVbPejWF8:1fIjRQzRxXglbjfjnxx88jLbWbC+94Wi

Score
3/10

Malware Config

Signatures

  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • df23f6af02eff6a266b813848478f308
    .rar
  • 幽灵网吧辅助工具 v4.2/lib/iext.fnr
    .dll windows:4 windows x86 arch:x86

    c026af21a6e107158b65bf9034b57c76


    Headers

    Imports

    Exports

    Sections

  • 幽灵网吧辅助工具 v4.2/lib/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    3fe89fa8d80000c8c9aa487e9ab5b867


    Headers

    Imports

    Exports

    Sections

  • 幽灵网吧辅助工具 v4.2/logo.gif
    .jpg
  • 幽灵网吧辅助工具 v4.2/main.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • 幽灵网吧辅助工具 v4.2/main.gif
  • 幽灵网吧辅助工具 v4.2/plugins/AInfo.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • 幽灵网吧辅助工具 v4.2/plugins/AntiFuck.dll
    .dll windows:4 windows x86 arch:x86

    d1b1d470695815e5d2859c5f33b4954e


    Headers

    Imports

    Exports

    Sections

  • 幽灵网吧辅助工具 v4.2/plugins/BRuninfo.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • 幽灵网吧辅助工具 v4.2/plugins/CTask.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • 幽灵网吧辅助工具 v4.2/plugins/DProcess.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • 幽灵网吧辅助工具 v4.2/plugins/EFilemgr.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • 幽灵网吧辅助工具 v4.2/plugins/FNet.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • 幽灵网吧辅助工具 v4.2/plugins/GSystem.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • 幽灵网吧辅助工具 v4.2/plugins/Hook.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • 幽灵网吧辅助工具 v4.2/plugins/ZOthers.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • 幽灵网吧辅助工具 v4.2/plugins/wshook.dll
    .dll windows:4 windows x86 arch:x86

    8cfb5639a044d231d1b5be8bc2f596cd


    Headers

    Imports

    Exports

    Sections

  • 幽灵网吧辅助工具 v4.2/set.ini
  • 幽灵网吧辅助工具 v4.2/svchost.exe
    .exe windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Sections

  • 幽灵网吧辅助工具 v4.2/yhan.dll
    .dll windows:4 windows x86 arch:x86

    ae0a5112fe1176f4e5f6e1bc95e4c209


    Headers

    Imports

    Exports

    Sections

  • 幽灵网吧辅助工具 v4.2/yhan.gif