General

  • Target

    7796341937010110a266a127d86df0725e625d9be1c02fc4fa5dc7fe96a42598

  • Size

    1.7MB

  • MD5

    00479fec2fee0d8e6961a59456922a29

  • SHA1

    4ce8fae9a17bb00b7fc9ad073e6c3032beec3514

  • SHA256

    7796341937010110a266a127d86df0725e625d9be1c02fc4fa5dc7fe96a42598

  • SHA512

    24da0ffb16dd549badaa26feb42e883018f934ea68a210afbd45031646a9091facc41ac3419458e59f0a90bda6609a8516bb4da3ab34504cf65f31ecb62392d0

  • SSDEEP

    49152:mNa8vnCim6x4Mz9SEHM0iTnDJJZk425V/zaBM3SbawwtlA:4xWTEHMba4aBN3SbAA

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 7796341937010110a266a127d86df0725e625d9be1c02fc4fa5dc7fe96a42598
    .rar
  • WB/libcurl.dll
    .dll windows:4 windows x86 arch:x86

    756a9edb427227393ce6ae8954c6dff7


    Headers

    Imports

    Exports

    Sections

  • WB/茧火虫用户端 V1.0.2.exe
    .exe windows:5 windows x86 arch:x86

    d1c1623f9bbf0e177ab5768de0518cba


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.