General
- Target 点击此处跳转直螃蟹官网.exe
- Size 3.1MB
- Sample260707-pfhaeaew9l
- SHA256 8cbf65f9c89d3306f6c3d0025d130579e175497316f321441d0dc04a77329e10
- MD5 65de7e7b662ae7a1de19737849770d1e
- SHA1 f74351e070dfa942de4cad9cc19ab2fe7f15b221
- SHA512 3fee52aeeffe3ca304fb0ce6f79224c0419ce63867d6e06cd5f38e9bf1e1a29612bba5f7cc84b0a5574583a1585cd8c5c27643eb464c7b06db7d9662d92b2870
- SSDEEP 98304:j4QAi1pVj2QIYHdFcgajPs8SHk1a06c/9EHzXaHKvhbsA4:jcilj9BdFcgajPs8SHk1a06c/9AXaHKS
- TLSH T104E57C5B66BD10E9D9A6D1B9C5074A0BD7B6F861023083CB0275CB9A5F333A20E3F765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
点击此处跳转直螃蟹官网.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
点击此处跳转直螃蟹官网.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 点击此处跳转直螃蟹官网.exe
- Size 3.1MB
- SHA256 8cbf65f9c89d3306f6c3d0025d130579e175497316f321441d0dc04a77329e10
- MD5 65de7e7b662ae7a1de19737849770d1e
- SHA1 f74351e070dfa942de4cad9cc19ab2fe7f15b221
- SHA512 3fee52aeeffe3ca304fb0ce6f79224c0419ce63867d6e06cd5f38e9bf1e1a29612bba5f7cc84b0a5574583a1585cd8c5c27643eb464c7b06db7d9662d92b2870
- SSDEEP 98304:j4QAi1pVj2QIYHdFcgajPs8SHk1a06c/9EHzXaHKvhbsA4:jcilj9BdFcgajPs8SHk1a06c/9AXaHKS
- TLSH T104E57C5B66BD10E9D9A6D1B9C5074A0BD7B6F861023083CB0275CB9A5F333A20E3F765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.