655eaeb12d0005dd588c92a7ef21bf35ee0f3c00f5d7d02adcba4a818396b758
- SHA256 655eaeb12d0005dd588c92a7ef21bf35ee0f3c00f5d7d02adcba4a818396b758
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
breed刷入工具，亲测破解最新固件/base64.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
breed刷入工具，亲测破解最新固件/base64.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
breed刷入工具，亲测破解最新固件/curl.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
breed刷入工具，亲测破解最新固件/curl.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
breed刷入工具，亲测破解最新固件/刷机.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
breed刷入工具，亲测破解最新固件/刷机.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 655eaeb12d0005dd588c92a7ef21bf35ee0f3c00f5d7d02adcba4a818396b758
- Size 612KB
- Sample260930-e8nmsaxfne
- SHA256 655eaeb12d0005dd588c92a7ef21bf35ee0f3c00f5d7d02adcba4a818396b758
- MD5 e4483dbedd2ed2d99079a65d259996ef
- SHA1 f0e249b57d9dae671f94b413e4e1e383f686bc7c
- SHA512 7802cee0b281ed349436c47dfe806cbcca79ad67a261899177d60e6e8be35bfea259deec022a6ca13cee766f25b89c2973e0720daf3ca44280fc12af370c2d5c
- SSDEEP 12288:MhmSgKiBkhevqF7UH/TM5mPBruPjq1toU8U0LxDzWF2CP3BOIa8M73ANi:ywecXbEmZCO1tVgBzrCPR/M73Ag
- TLSH T106D42351BD0F50A690E3463BB81A26D9FE0583E6EB97799DCA4E0490DD4BF7C106C32E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/breed刷入工具，亲测破解最新固件/base64.exe unpack001/breed刷入工具，亲测破解最新固件/curl.exe
File Explorer
-
655eaeb12d0005dd588c92a7ef21bf35ee0f3c00f5d7d02adcba4a818396b758.zip 612KB
-
breed刷入工具，亲测破解最新固件/base64.exe.exe 35KB
-
breed刷入工具，亲测破解最新固件/curl.exe.exe 545KB
-
breed刷入工具，亲测破解最新固件/dat.dat137KB
-
breed刷入工具，亲测破解最新固件/tianbaoha.dat252KB
-
breed刷入工具，亲测破解最新固件/刷机.bat.bat 8KB
breed刷入工具，亲测破解最新固件/base64.exe
- IMPHASH 9e9bab2e6b6bb644189bac559af2cf97
- SHA256 a0aba89ebeb995cedff714829cb08cfafc1f8481292702bfa30fc9c5a7bce88f
- MD5 ea7d5f64888907003a23fdb0c206d51f
- SHA1 3f2c6df877be3462d5d73f524068825fe5cb55c9
- SHA512 037027e14d64f982c5a254b3d8e7b8c22ebc91380eb97e479053caa9285e0751697e4c793e468f19e0e1e01f5a161b8f6996ba94e28ed9995bcd4d0bf84797ee
- SSDEEP 384:VyLelepVTKEV9oXtGfi9+j5d7lDbP9TacBl/E/vK9Y4LkeRpw:VyL/rhVt/30vK9Dpw
- TLSH T15CF24C4B6841E5F7E94122B000B66B77DF3F856B05618A47FB4CDCBA1E321359E1A38E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9136
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetModuleFileNameA
HeapAlloc
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
CloseHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
ReadFile
WriteFile
UnhandledExceptionFilter
HeapFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
FlushFileBuffers
CreateFileA
SetStdHandle
SetFilePointer
GetProcAddress
LoadLibraryA
SetEndOfFile
DeleteFileA
Name
.text
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
943B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1024B
Virtual Size
1006B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
breed刷入工具，亲测破解最新固件/curl.exe
- IMPHASH 4e6716cc550628b446353c54435cb69a
- SHA256 a28461d833b57b2794d0603730b99f24f48ec121afb68ba4b6d0d4f437831f13
- MD5 81bba4df847dd09aa045751b503240fd
- SHA1 2514cad43f5dae007e413ac04a65121f7e7e7842
- SHA512 65028f9f33952e3db015f147fb9cb54ecfd70c4810b12ef33f782b68669de417e1b91c8f100f24b88c54be2b7b7f50f226bfdb10b90b622c78e4aa5f4c021540
- SSDEEP 12288:YUO7p64vC8dmyVXu/9/mO4MQBwbgmdMmNCOTuB:Y77p6v8FV+/yMGzmddTu
- TLSH T152C46B44FFD741F2EDA705716683F77F0A7452018118CEE3EE98EE8DEA63A21221E255
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5344
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
advapi32
CryptAcquireContextA
CryptCreateHash
CryptDestroyHash
CryptDestroyKey
CryptEncrypt
CryptGetHashParam
CryptHashData
CryptImportKey
CryptReleaseContext
kernel32
CloseHandle
DeleteCriticalSection
EnterCriticalSection
ExpandEnvironmentStringsA
FormatMessageA
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableA
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
PeekNamedPipe
QueryPerformanceCounter
ReadFile
SearchPathA
SetEndOfFile
SetLastError
SetUnhandledExceptionFilter
Sleep
SleepEx
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoA
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
msvcrt
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_errno
_exit
_fmode
_fstati64
_get_osfhandle
_getpid
_initterm
_iob
_lock
_lseeki64
_onexit
_snwprintf
time
localtime
gmtime
_stati64
_sys_nerr
calloc
exit
fclose
fflush
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
fwprintf
fwrite
getenv
isalnum
isalpha
isgraph
islower
isprint
isspace
isupper
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
printf
puts
qsort
raise
realloc
setlocale
signal
sprintf
sscanf
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strncpy
strpbrk
strrchr
strstr
strtok
strtol
strtoul
_unlock
abort
atoi
tolower
toupper
vfprintf
wcscpy
_write
_utime
_strdup
_setmode
_read
_open
_mkdir
_isatty
_getch
_fileno
_close
_access
user32
MessageBoxW
wldap32
ber_free
ldap_err2string
ldap_first_attribute
ldap_first_entry
ldap_get_dn
ldap_get_values_len
ldap_init
ldap_memfree
ldap_msgfree
ldap_next_attribute
ldap_next_entry
ldap_search_s
ldap_set_option
ldap_simple_bind_s
ldap_unbind_s
ldap_value_free_len
ws2_32
WSACleanup
WSAGetLastError
WSAIoctl
WSASetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostname
getpeername
getsockname
getsockopt
htons
ioctlsocket
listen
ntohs
recv
recvfrom
select
send
sendto
setsockopt
socket
curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_version
curl_version_info
Name
.text
Size
373KB
Virtual Size
372KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
192B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
145KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
breed刷入工具，亲测破解最新固件/dat.dat
- SHA256 336fb5871a6910eec5c192c4404232de28227d8d7d8b9c75563a0abec1e3e008
- MD5 c2b74876cff02cdd69d50cccce25c5dc
- SHA1 ad02751559f7fba18b2797253fad4ecec6993366
- SHA512 9058803c1f44ea5fb3d62bf9079c15380d4d5f8a74a03f055946e8926e87e502da8ddf468eab4728a047e113abbbe36255f8f2eef4fcebaffc9abce9c711c99a
- SSDEEP 3072:/9LPgzEuVS9ACd4nUkImatolT4JyWCoOtLswzVmAZiuKVgyqmUv:/oTS9HGnUkI7GT4kWPOKwzpeiye
- TLSH T1D3D31236F5128E70936229350B6633A4EBC3BA90FE39AE45C88D51DBCF913234D53B65
- MD5 SHA1 SHA512 SSDEEP TLSH
breed刷入工具，亲测破解最新固件/tianbaoha.dat
- SHA256 f4b4c69989ad8352e434aeaa8e2e2b5bb4418b74b833bf701ae0b63b0a928720
- MD5 7ce68803c77fd3801bed84bd14d037d0
- SHA1 6d4a3e88a6716c879edf5c2529781af30eb7fd5c
- SHA512 cae1ed0f79400552d5ec8e9e8d6b2e5d70aa05391604bced75e46d3d5e2ea66355c67de00b5a630516ee3c712be903a0d6a214fb31f9b4cdcba19b6f9e60d1fa
- SSDEEP 6144:VzHrn0u1IWqXqXm/S+rycilgYUwmRh6ojPc:VzHrnLqXZgcAnFibbc
- TLSH T10D4423196BE7165EC104CA30A2BB7D2F123035B1A809ABE7835674F64ECFE279547933
- MD5 SHA1 SHA512 SSDEEP TLSH
breed刷入工具，亲测破解最新固件/刷机.bat
- SHA256 ffa5aefa77768f2cf8a2c4eb315968da7c046627b58c339978504321c73140a9
- MD5 ef1e647cb456552f1ad2d6fa9d315827
- SHA1 a0b9977c1abe62b1c77245672a22abe7541711b4
- SHA512 60bafbe064d9e392c3bfde403db23b3c619813d082cc486e3bcdde1ab7a3e41479649b6897d8d50eec5beb43a822db51108c336f621e58dacc936f26c39d8178
- SSDEEP 192:mJbqXU8dfsBm7E0eMpS4ggI7jb7mQUkMnWi0sxR53tu4nI2LfHMJeh9c:egTg/lsB3U
- TLSH T10A0232FE7CCCB8BF98AA4F9AA6B54933F5C465D70B509DC0A76549780B012E237B6014
- MD5 SHA1 SHA512 SSDEEP TLSH