General
- Target ONEGO-多功能挂机v5.62.zip
- Size 33.3MB
- Sample261007-d32f1scz3p
- SHA256 d2fb28ce32cf87d455e4b10c6f14e4db8d240491175cd5b0a1bbc0f84009871e
Score
8/10
Malware Config
Targets
-
- Target Autoruns.exe
- Size 11.4MB
- SHA256 66be72c5803412423e462926764ba9dc73a26a37aeb3cf3670e99ca8be34df9a
Score8/10-
Modifies Windows Firewall
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target 基础版本使用说明(+自定义)/1-图文识别版教程（推荐）.pdf
- Size 513KB
- SHA256 420eb24d64fc12e73e92082ffffeb818b5ff30f930851a8464a8da8f89f634b0
Score3/10 -
- Target 基础版本使用说明(+自定义)/2-时间循环-保姆级使用说明.pdf
- Size 1.0MB
- SHA256 604401b63342ac58d580a0b4ebf7f2d90c0ba65436a45c5c64ba95ed605c61a5
Score3/10 -
- Target 安卓版手机APP（用户中心）/ONEGO挂机用户中心.apk
- Size 632KB
- SHA256 c2b6fcd7d2cb860db38cb6f75e0c030f6036e53f1f63e3537ebabeeddc308a8b
Score1/10 -
- Target 更新日志.html
- Size 23KB
- SHA256 7372f96cdbed9aabd44125103bb5a176888967fe9860fa9609a46ca022a482e8
Score3/10
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
1