Overview

overview

10

Static

static

10

刺客远�...��.zip

windows7-x64

1

刺客远�...��.zip

windows10-1703-x64

1

刺客远�...��.zip

windows10-2004-x64

10

刺客远�...��.zip

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    刺客远程控制破解版修复免杀过传输报毒.zip

  • Size

    28.2MB

  • MD5

    33a5ef7be9a92b856270684810c822ce

  • SHA1

    ef7f1e074026c5f403dec1178913ed744d56f84c

  • SHA256

    c15b7d2402be8884b7f0e7cbc263e3b3c034601e559b530c55aeb5640ece8822

  • SHA512

    daabc739cd92b6170b16fa8cf324d53eacd483e27d0defa26cbab91310019d94d03acf072fd37d789f82735ac84ccffbdb556890585ab6ac0a38bfd999361547

  • SSDEEP

    786432:1kbXX5Y+ExmlAYeUtDYgfBv+NvtCWPy5SU5CrPYn+EPU9SkKOw956RGxHg:iN5ExWm2YgfdytCWkSaCrPY+ErtxA

Score
10/10
upxblackmoon

Malware Config

Signatures

  • Blackmoon family
    blackmoon
  • Detect Blackmoon payload 6 IoCs
  • ACProtect 1.3x - 1.4x DLL software 4 IoCs

    Detects file using ACProtect software.

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 29 IoCs

    Checks for missing Authenticode signature.

Files

  • 刺客远程控制破解版修复免杀过传输报毒.zip
    .zip
  • Cache/Api interface/File Download Options.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Cache/Api interface/Systeam Setini.dll
    .dll windows:4 windows x86 arch:x86

    95585fe4f2eee5fb6ec130132bbcb2ac


    Headers

    Imports

    Exports

    Sections

  • Cache/Api interface/Windows Install.dll
    .dll windows:4 windows x86 arch:x86

    cb93c75d19b9d01034d67df1b29deb2d


    Headers

    Imports

    Exports

    Sections

  • Cache/Api interface/dll_zz_th.dll
    .dll windows:4 windows x86 arch:x86

    7f441486db7538317035591b470cfeb3


    Headers

    Imports

    Exports

    Sections

  • Cache/Api interface/grouping.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Cache/Api interface/quick text editor.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • Cache/BUG/6817793 127.0.0.1.BUG.7620815
  • Cache/DAT/Copy.bat
  • Cache/DAT/i.exp
    .dll windows:4 windows x86 arch:x86

    478bf7d44bdab2cfdcb55f677c1b2ebd


    Headers

    Imports

    Exports

    Sections

  • Cache/DAT/install.dat
    .exe windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Cache/DAT/install.pg
    .dll windows:4 windows x86 arch:x86

    39550e91dd36a97b4bddde0e00205002


    Headers

    Imports

    Exports

    Sections

  • Cache/DAT/install.pg.dll
    .dll windows:4 windows x86 arch:x86

    39550e91dd36a97b4bddde0e00205002


    Headers

    Imports

    Exports

    Sections

  • Cache/DAT/警告.txt
  • Cache/Quickaccess/Mylist.ini
  • Cache/Quickaccess/Quickaccess.ini
  • Cache/Winpe/atl.dll
    .dll regsvr32 windows:10 windows x86 arch:x86

    9770a95c6b6c769aa3c12b78be296801


    Headers

    Imports

    Exports

    Sections

  • Cache/Winpe/crtdll.dll
    .dll windows:4 windows x86 arch:x86

    ac8a18458b5e230a01fe80ee9ebcb2c2


    Headers

    Imports

    Exports

    Sections

  • Cache/Winpe/help.txt
  • Cache/ico/main.ico
  • Cache/menu.main
  • Cache/menu.main2
  • Cache/menu.menu
  • Cache/menu.regedit
  • Cache/plugin/client/WQPlXhOR0.1.dll
    .dll windows:4 windows x86 arch:x86

    a5677514b3b4e52a8205f1faa2f34f6e


    Headers

    Imports

    Exports

    Sections

  • Cache/plugin/client/cmd_shell.ini
  • Cache/plugin/client/cmd_shell_0.1.dll
    .dll windows:4 windows x86 arch:x86

    58357f4aecd39b72dc3f48fab8638c87


    Headers

    Imports

    Exports

    Sections

  • Cache/plugin/client/file_mame.ini
  • Cache/plugin/client/file_mame_0.8.dll
    .dll windows:4 windows x86 arch:x86

    adc297eaaf76336387f01c34f49c4f40


    Headers

    Imports

    Exports

    Sections

  • Cache/plugin/client/loadname.txt
  • Cache/plugin/client/remote_screen.ini
  • Cache/plugin/client/serv_server.ini
  • Cache/plugin/client/serv_server_0.1.dll
    .dll windows:4 windows x86 arch:x86

    025115fac6ad0bf194728641ce9ac390


    Headers

    Imports

    Exports

    Sections

  • Cache/plugin/client/video_screen.ini
  • Cache/plugin/client/video_screen_0.5.dll
    .dll windows:4 windows x86 arch:x86

    fce8bc078b54cc613ed6ccd836af7a62


    Headers

    Imports

    Exports

    Sections

  • Cache/plugin/server/cmd_shell.dll
    .dll windows:4 windows x86 arch:x86

    58357f4aecd39b72dc3f48fab8638c87


    Headers

    Imports

    Exports

    Sections

  • Cache/plugin/server/cmd_shell.ini
  • Cache/plugin/server/cmd_shell_0.1.dll
    .dll windows:4 windows x86 arch:x86

    8b6bf4c154caa645656c6fe3c78c12c8


    Headers

    Imports

    Exports

    Sections

  • Cache/plugin/server/file_mame.ini
  • Cache/plugin/server/file_mame_0.9.dll
    .dll windows:4 windows x86 arch:x86

    a82aa3bf7d3c67a7bd4f2457057102b4


    Headers

    Imports

    Exports

    Sections

  • Cache/plugin/server/loadname.txt
  • Cache/plugin/server/remote_screen.ini
  • Cache/plugin/server/remote_screen_3.1.dll
    .dll windows:4 windows x86 arch:x86

    f5e9b45868e1171b433ae5da4f5762a8


    Headers

    Imports

    Exports

    Sections

  • Cache/plugin/server/serv_server.ini
  • Cache/plugin/server/serv_server_0.1.dll
    .dll windows:4 windows x86 arch:x86

    c58db1b36018cb0c005d88e872a0e7e4


    Headers

    Imports

    Exports

    Sections

  • Cache/plugin/server/video_screen.ini
  • Cache/plugin/server/video_screen_0.2.dll
    .dll windows:4 windows x86 arch:x86

    f5e9b45868e1171b433ae5da4f5762a8


    Headers

    Imports

    Exports

    Sections

  • Cache/qqwry.dat
  • Cache/release.bat
  • Cache/rule.txt
  • Cache/variable/variable.txt
  • Cache/windows/Advanced Customization/Main.ini
  • Cache/windows/Advanced Customization/主体窗口图标.png
    .png
  • Cache/windows/win_main/list.txt
  • Cache/windows/win_main/safe.txt
  • Cache/刺客远程管理.ini
  • ebxshouquan.dat
  • ico/1.ini
  • ico/1.localstorage
  • ico/1.md5
  • ico/1.sys
  • ico/1.txt
  • ico/1.url
  • ico/1BOOTNXT
  • ico/1bootmgr
  • ico/wjj.bmp
  • ssdl_data_thread.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • winspool.drv
    .dll windows:4 windows x86 arch:x86

    1ce67502847c1640ec74e4b2bde67460


    Headers

    Imports

    Exports

    Sections

  • 刺客远程管理.exe
    .exe windows:5 windows x86 arch:x86

    99901b9697bda9f2bb9bfaa466d7b500


    Headers

    Imports

    Sections

  • 剪辑版拦截信息/192.168.1.28.txt