Overview

overview

7

Static

static

3

winos4.0�...版.7z

windows10-1703-x64

3

winos4.0�...版.7z

windows7-x64

7

winos4.0�...版.7z

windows10-2004-x64

3

winos4.0�...版.7z

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    winos4.0修复优化版.7z

  • Size

    19.9MB

  • MD5

    46b957f3dec9aaadf869c2164ada5844

  • SHA1

    f55c44d47aa287e9cc755bcba6ec9f07a07ee3c8

  • SHA256

    e61f9a96946a17699e816f06b9aa2fb2220e2eadc2609caf471ed3597437d1a5

  • SHA512

    cbcaa7d3e44e31e55e0864677eefb662843811a75ab3eb22a3fcc4aa1a69e94248ff8b868bd77113f5d12740274349b5e8db887529d429f30cb0577960100a37

  • SSDEEP

    393216:FLgedLWvvUxAMgBKEhwJo56IQhA4ByeRiSTehciju9SfjdwMUwBdYJO:Fs+BL+QZByFStipfxjYJO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 18 IoCs

    Checks for missing Authenticode signature.

Files

  • winos4.0修复优化版.7z
    .7z
  • Ebx1.0.exe
    .exe windows:5 windows x86 arch:x86

    0c3cba76cf00268efbf1f39077e8f29e


    Headers

    Imports

    Exports

    Sections

  • Ebx1.0.exp
  • Ebx1.0.lib
  • Ebx1.0.pdb
  • OtherPlugins/x64/一键提权启动.dll
    .dll windows:5 windows x64 arch:x64

    b09c74e70f2084f1980b66d566828aa0


    Headers

    Imports

    Exports

    Sections

  • OtherPlugins/x64/企鹅解密.dll
    .dll windows:5 windows x64 arch:x64

    c9e6ad04be0879d0fa7f74b4f971923c


    Headers

    Imports

    Exports

    Sections

  • OtherPlugins/x64/写计划任务每次.dll
    .dll windows:5 windows x64 arch:x64

    121f61f20cfb7c69c28c2bff9bf17d56


    Headers

    Imports

    Exports

    Sections

  • OtherPlugins/x64/断网启动.dll
    .dll windows:5 windows x64 arch:x64

    455754e79637eb26e2c53c7928ed714b


    Headers

    Imports

    Exports

    Sections

  • OtherPlugins/x64/更新白文件DLL.dll
    .dll windows:5 windows x64 arch:x64

    f01f25d1e595a2935e7f116db799c035


    Headers

    Imports

    Exports

    Sections

  • OtherPlugins/x64/添加用户x64.dll
    .dll windows:6 windows x64 arch:x64

    3d0112411bf23f72b9f1566a74ccbf10


    Headers

    Imports

    Sections

  • OtherPlugins/x64/禁止微信升级.dll
    .dll windows:5 windows x64 arch:x64

    ea177065d8cb2e0493722e9bb528b44c


    Headers

    Imports

    Exports

    Sections

  • OtherPlugins/x64/结束进程下载文件.dll
    .dll windows:5 windows x64 arch:x64

    f01f25d1e595a2935e7f116db799c035


    Headers

    Imports

    Exports

    Sections

  • OtherPlugins/x64/驱动插件.dll
    .dll windows:5 windows x64 arch:x64

    43bda4a250cf1a70ca6761a8364397ba


    Headers

    Imports

    Exports

    Sections

  • OtherPlugins/x86/K核晶360.dll
    .dll windows:5 windows x86 arch:x86

    99d48424e2d8e57a0d0369479eb52dc9


    Headers

    Imports

    Exports

    Sections

  • OtherPlugins/x86/企鹅解密.dll
    .dll windows:5 windows x86 arch:x86

    9f5530aa7f7570671cdd194ac9051681


    Headers

    Imports

    Exports

    Sections

  • OtherPlugins/x86/写计划任务每次.dll
    .dll windows:5 windows x86 arch:x86

    213f77713427aa57ad576ff9b2a65b69


    Headers

    Imports

    Exports

    Sections

  • OtherPlugins/x86/更新白文件DLL.dll
    .dll windows:5 windows x86 arch:x86

    476e54f494f044aadfacecb1120ff424


    Headers

    Imports

    Exports

    Sections

  • OtherPlugins/x86/添加用户x86.dll
    .dll windows:6 windows x86 arch:x86

    e3024255a7594e6449e6cde1261acbd9


    Headers

    Imports

    Sections

  • OtherPlugins/x86/禁止微信升级.dll
    .dll windows:5 windows x86 arch:x86

    2d81639cfcf0b7dec5029a96d8ef124e


    Headers

    Imports

    Exports

    Sections

  • OtherPlugins/x86/结束进程下载文件.dll
    .dll windows:5 windows x86 arch:x86

    476e54f494f044aadfacecb1120ff424


    Headers

    Imports

    Exports

    Sections

  • OtherPlugins/x86/驱动插件.dll
    .dll windows:5 windows x86 arch:x86

    44dec58e0961a6ad363070f49e4d665f


    Headers

    Imports

    Exports

    Sections