General

  • Target

    bf28e1391c91a7335007130edd887ee1ca48d70d5d2f17e103d50901510d87ce

  • Size

    12.0MB

  • MD5

    7120c3f20aefbc6200b773a60563825d

  • SHA1

    629a647e4ee7634cc4c454780b3c7055801647e6

  • SHA256

    bf28e1391c91a7335007130edd887ee1ca48d70d5d2f17e103d50901510d87ce

  • SHA512

    e3919cd261fa452074d95335ea2775c585de2fce1163733ab0d71ad0f0d038e1dbe33359c0af3e153b53a9478282a6930246090fecc7b6da127cb6f0b9775e2a

  • SSDEEP

    196608:iR5h9jHvcud88rjsox6Ki8Jb+pGgyqP5nVA7PHhBmAGlN3jJGUS6RlR0rS6OUbuc:iTjHxd8SsortCnETmAGz3PvGrS6OUKc

Score
7/10

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • bf28e1391c91a7335007130edd887ee1ca48d70d5d2f17e103d50901510d87ce
    .zip
  • RKinFee/RKinFee_专业版_v2.2.6.5.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • RKinFee/【1】教程:注册登录教程.url
    .url
  • RKinFee/【2】教程:打不开或无法登录的教程.url
    .url
  • RKinFee/【3】教程:功能无效或游戏闪退的教程.url
    .url
  • RKinFee/【4】购买:双击打开购卡链接.url
    .url
  • RKinFee/【5】工具:兔子游戏清理工具v1.0.4.zip
    .zip
  • 兔子游戏清理工具v1.0.4.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • 解决win10 11提示包含病毒方法.url
    .url