Overview

overview

7

Static

static

3

换脸.exe

windows7-x64

7

换脸.exe

windows10-2004-x64

7

$PLUGINSDI...es.dll

windows7-x64

3

$PLUGINSDI...es.dll

windows10-2004-x64

3

$PLUGINSDI...os.dll

windows7-x64

3

$PLUGINSDI...os.dll

windows10-2004-x64

3

$PLUGINSDIR/INetC.dll

windows7-x64

3

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

获取微�...��.exe

windows7-x64

1

获取微�...��.exe

windows10-2004-x64

1

获取浏�...ie.exe

windows7-x64

1

获取浏�...ie.exe

windows10-2004-x64

1

获取浏�...��.exe

windows7-x64

1

获取浏�...��.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    7e6ee222ceaa6cccdc525e1903482ad3ef3358d8cb26cac53b8af076faf5c409

  • Size

    693KB

  • MD5

    a3a2d9c33df8e94b8b1cd0b7e205c4de

  • SHA1

    a7eb5288c864eaf24f211aeabd5efe055238e07d

  • SHA256

    7e6ee222ceaa6cccdc525e1903482ad3ef3358d8cb26cac53b8af076faf5c409

  • SHA512

    50ab4e4c63657ca820da890e218b0a4f1ad686f630f7738b0267b2dd135c4742382bb7ad42a23eeb4ca216f234e30b968f00ab25a9bf41aef883f0e68d27af6c

  • SSDEEP

    12288:O8yuzfFkRZ24TNZm7+e78FttkI8neNsw7gFw0XoGUmhKF/xU:a/Z24/mqe7TrecFoeK/U

Score
3/10

Malware Config

Signatures

  • Unsigned PE 10 IoCs

    Checks for missing Authenticode signature.

Files

  • 7e6ee222ceaa6cccdc525e1903482ad3ef3358d8cb26cac53b8af076faf5c409
    .zip
  • __MACOSX/._换脸.exe
  • __MACOSX/._获取微信聊天记录.exe
  • __MACOSX/._获取浏览器cookie.exe
  • __MACOSX/._获取浏览器密码.exe
  • 换脸.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Headers

    Imports

    Sections

  • $PLUGINSDIR/CPUFeatures.dll
    .dll windows:5 windows x86 arch:x86

    7d9ed6a9d9f704d7ec777cf163d99578


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ExecDos.dll
    .dll windows:6 windows x86 arch:x86

    95fc86e678981f716d756a01610eb55d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    163fdad7b5f915e3a0ca7ad1d08b4ff8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • 获取微信聊天记录.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • 获取浏览器cookie.exe
    .exe windows:6 windows x64 arch:x64

    41f205051d02f29f9d9ff52f6b3ed5d3


    Headers

    Imports

    Sections

  • 获取浏览器密码.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections