Overview

overview

10

Static

static

10

搞机工�...pi.dll

windows7-x64

3

搞机工�...pi.dll

windows10-2004-x64

3

搞机工�...pi.dll

windows7-x64

3

搞机工�...pi.dll

windows10-2004-x64

3

搞机工�...or.cmd

windows7-x64

1

搞机工�...or.cmd

windows10-2004-x64

1

搞机工�...in.dll

windows7-x64

1

搞机工�...in.dll

windows10-2004-x64

1

搞机工�...db.exe

windows7-x64

3

搞机工�...db.exe

windows10-2004-x64

3

搞机工�...ot.exe

windows7-x64

3

搞机工�...ot.exe

windows10-2004-x64

3

搞机工�...v9.exe

windows7-x64

3

搞机工�...v9.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8fce64111907ee6f0cfa6a5117fd5117574bee3e3bd69cd9efa1c4217f17bc92

  • Size

    6.9MB

  • Sample

    241108-cx2zxstbpj

  • MD5

    aac007b1152b19fe60759e11cda74eb4

  • SHA1

    0f509cffe2cc2612aed32d59500c2a88125f0303

  • SHA256

    8fce64111907ee6f0cfa6a5117fd5117574bee3e3bd69cd9efa1c4217f17bc92

  • SHA512

    cdbf5d8b2206d6aa17d680aefa6fdbbc05d2013b8c6f3c01093e9390cefd8ee7254ebd1fce850c613c79ffa01cb7ae59d2ba49e180986aa51a34cb996e8f4d63

  • SSDEEP

    196608:F+CBOTHnS47nCUDXEOSercoTN+9bFwpimgtwN0:wCBOTyEhDXEOG7e/N0

Score
10/10
revengeratdiscoverystealer

Malware Config

Targets

    • Target

      搞机工具箱9.93/AdbWinApi.dll

    • Size

      105KB

    • MD5

      d2c034449be65653aec2459d9ab83ae5

    • SHA1

      6127adb5894a7b99293fd49c25ea5ac2710d0c4c

    • SHA256

      db92f418f6c384faeebccadbc592fb339af3d51ecfec3ec04bd3572080247bae

    • SHA512

      9294fbabaeb6f4907500aa5639b45cece492b78db79069fa950fd1020d08f1a5372b5153495da8d662b5a1509501685741add1bfea3b8a43343f9960fae73f78

    • SSDEEP

      1536:wwqdq+3pvspmLh8SCykrpTG7kfGHuNezq02XJqo+iFi1yCP17HxEyB:wwqD3L8Tezq0et+ui1y6L

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      搞机工具箱9.93/AdbWinUsbApi.dll

    • Size

      71KB

    • MD5

      93a6075b7ae7d0df52ec55017a2f8214

    • SHA1

      af6729c67f09f27440a2354cf7a41db5defb70a5

    • SHA256

      3ba13420d47c60d958e0d5b333440f9895704879bb7c983b55f195717f621a3e

    • SHA512

      c4b17a54edf4aa75a2456a3d3b647fc28016fdbc98cda725cc34e0f631f3d357c9abac9f7d089137401ddeefac7af0fd353aca3b89777093c1fcb55dca8de3eb

    • SSDEEP

      1536:J72doFmOiHizFbPlspcsbj5ZsP+YeTs1px7HxEw:JSSfN9+YeTs1px

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      搞机工具箱9.93/Connector.cmd

    • Size

      785B

    • MD5

      29a0631489ffb79560d4cad4630a7482

    • SHA1

      9488765a82d7f472056fa1fa550f06fdffe2573d

    • SHA256

      65fc1a9643226691b82b8739d1b1a3f328108cec336f16bbb03f0e645c863ccd

    • SHA512

      99e7dcb3fb944eab9d9a1eca2e97e68b039e77fd087889589f48d2c4cdafc1911e666cad703222414ccde5f8690999f898422af6b70bfbabe3ac5346dbe45d80

    Score
    1/10
    behavioral5behavioral6

    • Target

      搞机工具箱9.93/MaterialSkin.dll

    • Size

      6.4MB

    • MD5

      77dec48d6870d0658760ac5f79e3a496

    • SHA1

      ca1fd236597eaedc901669b41313e747149ee20c

    • SHA256

      04021c60a2ecc2bf46152cccb973dde479727da66f1f041a9bc50b5f98ebfed4

    • SHA512

      dc9caea7720c0383e42c563dbedb5aedb60233d953a8a89613e1edb447f7c1cc6832d9ae7cc03d743e468e46aa8b8845a673f371b66beb60997ae7b47a37eea1

    • SSDEEP

      98304:MEvd9tWpmIgMlqVz+rQVe97lwu9cXvBxDh3DYnskFb06vSXvfnjMK3aYLB+8uN4E:MDKv8XcXD4K

    Score
    1/10
    behavioral7behavioral8

    • Target

      搞机工具箱9.93/adb.exe

    • Size

      5.7MB

    • MD5

      ae6975e7c2211152f5fa54a1fddf414d

    • SHA1

      928aac595aa43dfcf540e7b03f747b4c3bdf574e

    • SHA256

      0e606318957baac81b997ccd8ee4bcdff79964a9921da07c716aea3e8d856af7

    • SHA512

      1d84c25b228268bdb620098a01054e010f2afd007822497ae81057c4c73d887e62adc5edd9461ae5795f954909435935aa41f223de3a9a6969c5f31cb4e9462c

    • SSDEEP

      98304:Xk1cPO5m7ufbUgcuNd3FIicIGNhk56NW:XMFhbFhFPcIGLk5

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      搞机工具箱9.93/fastboot.exe

    • Size

      1.8MB

    • MD5

      253a39f42343ec195a4071f82babd059

    • SHA1

      58b296e7e6d9b731b10337e7a563e37bc510c487

    • SHA256

      e1b1537a9f5e73c746a96f6f2fe3461477320867a4206b7ece138ac1aeef5300

    • SHA512

      189f966bf757690d7fa0821b0486d83c739cd3a0355401731311cb11e6df7d8bc22d0d5ec63bd553349f350bdf28f370f731375a16fadcbee926a4479646d40c

    • SSDEEP

      24576:IhT6NJwYw+ySpr4+x93EUfa0xJSnq1pKQeCnWdbeUezvTPNwrXm4xzh+OtlHr:Vy4XdaRnSWtehwrX1BhlJ

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      搞机工具箱9.93/搞机工具箱v9.exe

    • Size

      1.4MB

    • MD5

      f03636c348040a8585cf54982c2ccd45

    • SHA1

      edf92650788c50af42dd5e5794b58e772b3370c9

    • SHA256

      51bb97360e870301151ea4e66ebecae38beead15243c6a44df47da638f5841ef

    • SHA512

      c7d136dfdbc01cc2aee8a15befcc173206145a07ffd30c1d405b84247c6f69c9f7b784be39015a79c95f7916ce679389f6217094574beab799cf7d6ec366dbfa

    • SSDEEP

      6144:ejf46Vxew/VJaHOf0SEaKGY/voKgjETT6rGT/vKYzY6iXyZkUgfJuIARg1xctSe/:Kf46KHVPM6iikRYjEctJhJL

    Score
    3/10
    discovery
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks