Overview

overview

7

Static

static

3

大麦网�...��.dmg

macos-10.15-amd64

1

tickets/ti...ickets

macos-10.15-amd64

1

大麦网�...��.exe

windows7-x64

7

大麦网�...��.exe

windows10-2004-x64

7

$PLUGINSDI...ID.dll

windows7-x64

3

$PLUGINSDI...ID.dll

windows10-2004-x64

3

$PLUGINSDI...nu.dll

windows7-x64

3

$PLUGINSDI...nu.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

tickets.exe

windows7-x64

1

tickets.exe

windows10-2004-x64

1

uninstall.exe

windows7-x64

7

uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dabe8b005556188254a4dd6d7326e7ab5dc940446b2247fd7b0e59a4c1d8600c

  • Size

    10.7MB

  • MD5

    9000c264faa6fd9de86d1ede620345a4

  • SHA1

    a0b4e825d26aad24f9cad0af63f7c48352ebe9d4

  • SHA256

    dabe8b005556188254a4dd6d7326e7ab5dc940446b2247fd7b0e59a4c1d8600c

  • SHA512

    9973e1bb7df84c07d7005e3fd271a796f51632b3235e2a0e1c001b8cf6db5bb228ea27bf34033787717cd163b0f075f6bf5fe6e56cfdab4a1bf62ea9e416f4f0

  • SSDEEP

    196608:3mEO0rDUwniXiUBZXC52s9MdplHUXN7g55Siic1qhRxcKEyPpIQMhapCd77+D9NB:2Epr4wn4M2lFnLt1v4pZhCp0xD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • dabe8b005556188254a4dd6d7326e7ab5dc940446b2247fd7b0e59a4c1d8600c
    .zip
  • 大麦网演唱会门票抢票软件/mac系统/大麦抢票.dmg
    .dmg macos
  • tickets/.VolumeIcon.icns
  • tickets/tickets.app/Contents/Info.plist
    .xml
  • tickets/tickets.app/Contents/MacOS/tickets
    .macho macos arch:arm64
  • tickets/tickets.app/Contents/Resources/icon.icns
  • 大麦网演唱会门票抢票软件/win系统/大麦抢票.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/ApplicationID.dll
    .dll windows:6 windows x86 arch:x86

    8c45ff8a205d07c8c17066afebcdfc91


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x86 arch:x86

    80469f6834e579db68a646d49780b9d5


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll windows:6 windows x86 arch:x86

    b392d57756ec58e18fc530625caf424c


    Headers

    Imports

    Exports

    Sections

  • tickets.exe
    .exe windows:6 windows x64 arch:x64

    e256bde93d4e09886329efba9673df3a


    Headers

    Imports

    Sections

  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll windows:6 windows x86 arch:x86

    b392d57756ec58e18fc530625caf424c


    Headers

    Imports

    Exports

    Sections