General
- Target 5bf1e6090c37ab99efd11230a1a0e790704202a2c5a46433c7d4a0adc4a044b4
- Size 7.1MB
- Sample260821-kvvf3a1shv
- SHA256 5bf1e6090c37ab99efd11230a1a0e790704202a2c5a46433c7d4a0adc4a044b4
- MD5 7ea0212c13c08b6733acf53a99d60b4b
- SHA1 d410005ddabd305721fcdc3614b8301aee0c667e
- SHA512 c9521fe0af75102c1f5388f3df234c36cf80391867bcae2c4e5bd48db097116119fb50ef672ee27fe2b11c608b821e2a35bea86f0374e348eb607b35cf3f6139
- SSDEEP 98304:pObWrDnWTgKJ+VQLpd+n3dJxe51i3xs8xQuUqy5V8VItLdxsfZzD+wDls8:AeDR8+Vc0x8i3a8ud5V8SBxsu8
- TLSH T1D97633B6326BC7959B72F97E541C7782B71E2067BD28E827F3080BED13516C2484E2D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
神仙命令工具组/Optimizer-16.7.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
神仙命令工具组/Optimizer-16.7.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
神仙命令工具组/WiseCare365-Pro-7.2.3.696.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral4
Sample
神仙命令工具组/WiseCare365-Pro-7.2.3.696.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 神仙命令工具组/Optimizer-16.7.exe
- Size 2.5MB
- SHA256 03a234060541b686ac4265754aff43df9325c21383f90e17f831e67965d717f8
- MD5 7f57207f221db2b08e27d64bc9121b28
- SHA1 3bfc4b12a533ee1ce62e5d348027d4ac90ab49db
- SHA512 7cc44ff1c3210db2478f4e37fef23669f0425b1b1672fc5f53956890daccb84b32fa25c8da9f7ce0cd1deb9e697e46cdae0762a0af818f98b93544b8e39f8a25
- SSDEEP 24576:zv5MZtiOMKNOJMv9EC8oJ8VxHuDBjk38WuBcAbwoA/BkjSHXP36RMG:zxMZtiOMK9EC8oa6CSA/Bkj0
- TLSH T176C5291333E84927F2AE677F9071093D53B9AA3F9A77C74E7814B89E84957028907723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target 神仙命令工具组/WiseCare365-Pro-7.2.3.696.exe
- Size 6.3MB
- SHA256 0bff667d6607ad2ef7d172a8fd531cc995fac4c8cadefdbc3de75e87d88da5aa
- MD5 d779601cf6c240c4b99456ce48afcf8b
- SHA1 e6cba329bfa8fc432ac0b6a9ecec407fd98accdd
- SHA512 7a23991874966be43c448800da102364a1daf259b00cc2545b0ffbade603213c1d9a6dfdb2974bdbc3f7559ae75fa84ee109720e8fc6e95fb455d82ef0f2fcb4
- SSDEEP 98304:hgwRiYnMuwcxUpHUu1QndRn8IiSZhiiadQPxabHXunVv5DakgJ:hgnmMNcOxQLn8IiS7haePxab3uVv5DT2
- TLSH T17E66332237C1C9B8DE621BB4485977506B5FE9910B1445CFA7A05F0ECAF22C258F92FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL