General
- Target d9f213f7ac2c284b965280b5ac1e9ae6f12da5ec57c44308181bb806d0c97d52
- Size 36KB
- Sample260716-vdwynsdt71
- SHA256 d9f213f7ac2c284b965280b5ac1e9ae6f12da5ec57c44308181bb806d0c97d52
Malware Config
Targets
-
- Target 电脑死机诊断助手\CrashForensics.ps1
- Size 64KB
- SHA256 36b61203c8583e0bfacf0f531af1aafa3e45541d435821d16183265ef7c222b5
Score6/10-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
-
- Target 电脑死机诊断助手\CrashMonitor.ps1
- Size 4KB
- SHA256 eb7c811156bc0350d8d6b4516c99a0798a328e6ec49664c3d5c2f55a473b624d
Score3/10 -
- Target 电脑死机诊断助手\Run-CrashForensics-Admin.vbs
- Size 781B
- SHA256 2b335e362dd9cd2c9ff7a14c25f9d13c83fd6444a3c562914fbf4669eef8f3b2
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
-
- Target 电脑死机诊断助手\Run-CrashForensics.cmd
- Size 130B
- SHA256 df8c29c2200e27e4f8e56d592d8518f2560a81e8daf837b78214dccfc3467292
Score6/10-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
-
- Target 电脑死机诊断助手\Run-LiveMonitor-8Hours.cmd
- Size 179B
- SHA256 48bf7811fbc893bb83e0c682f2ab1f69754770a0d6b5ce6290111737ee0da326
Score3/10 -
- Target 电脑死机诊断助手\产品介绍.html
- Size 3KB
- SHA256 1b29e6a8986028fd58f0d461a1433595953327c062600323c4614653edea9c1d
Score3/10 -
- Target 电脑死机诊断助手\开始诊断-普通模式.cmd
- Size 133B
- SHA256 1b3e7cb5e4f3b4d7ea99e1726065b6de9e3c87be9a997cb632e36bb42723692c
Score6/10-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
-
- Target 电脑死机诊断助手\开始诊断-管理员.vbs
- Size 781B
- SHA256 2b335e362dd9cd2c9ff7a14c25f9d13c83fd6444a3c562914fbf4669eef8f3b2
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
-
- Target 电脑死机诊断助手\死机前监控-8小时.cmd
- Size 182B
- SHA256 e4fba4d7338ca31135fb792cb65927dad838f1bd958379ecb2b1ee4ba8f400a5
Score3/10 -
- Target 电脑死机诊断助手\电脑死机诊断助手.exe
- Size 14KB
- SHA256 a7f257e649a4b882f9c878e34666e133702001eaf8736eed221ea5f04ebc6e9b
Score1/10