BUAA-WaterPoweredRocket-v1.36.zip
- SHA256 55a008687f60774b14d3849ee6ff51dff0f01ce820dacd8024b63157541a48a3
Overview
overview
4Static
static
3BUAA-Water...et.exe
windows10-2004-x64
4BUAA-Water...et.exe
windows11-ltsc_2024-x64
4BUAA-Water...hon.py
ubuntu-18.04-amd64
3BUAA-Water...hon.py
debian-9-armhf
3BUAA-Water...hon.py
debian-9-mips
3BUAA-Water...hon.py
debian-9-mipsel
3BUAA-Water...ing.py
ubuntu-18.04-amd64
3BUAA-Water...ing.py
debian-9-armhf
3BUAA-Water...ing.py
debian-9-mips
3BUAA-Water...ing.py
debian-9-mipsel
3BUAA-Water...dge.py
windows10-2004-x64
3BUAA-Water...dge.py
windows11-ltsc_2024-x64
3BUAA-Water...��.cmd
windows10-2004-x64
3BUAA-Water...��.cmd
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BUAA-WaterPoweredRocket/BUAA-WaterPoweredRocket.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
BUAA-WaterPoweredRocket/BUAA-WaterPoweredRocket.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
BUAA-WaterPoweredRocket/运行组件/nn_training/crosscheck_python.py
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
BUAA-WaterPoweredRocket/运行组件/nn_training/crosscheck_python.py
Resource
debian9-armhf-20260513-en
debian-9-armhf
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
BUAA-WaterPoweredRocket/运行组件/nn_training/crosscheck_python.py
Resource
debian9-mipsbe-20260513-en
debian-9-mips
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
BUAA-WaterPoweredRocket/运行组件/nn_training/crosscheck_python.py
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
BUAA-WaterPoweredRocket/运行组件/nn_training/nn_training.py
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
BUAA-WaterPoweredRocket/运行组件/nn_training/nn_training.py
Resource
debian9-armhf-20260513-en
debian-9-armhf
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
BUAA-WaterPoweredRocket/运行组件/nn_training/nn_training.py
Resource
debian9-mipsbe-20260513-en
debian-9-mips
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
BUAA-WaterPoweredRocket/运行组件/nn_training/nn_training.py
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
BUAA-WaterPoweredRocket/运行组件/python_simulation_bridge.py
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral12
Sample
BUAA-WaterPoweredRocket/运行组件/python_simulation_bridge.py
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral13
Sample
BUAA-WaterPoweredRocket/运行组件/配置Python环境.cmd
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral14
Sample
BUAA-WaterPoweredRocket/运行组件/配置Python环境.cmd
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target BUAA-WaterPoweredRocket-v1.36.zip
- Size 473KB
- Sample261012-29cm8sfa92
- SHA256 55a008687f60774b14d3849ee6ff51dff0f01ce820dacd8024b63157541a48a3
- MD5 66e14b76a955f11326cdae741afbf550
- SHA1 568eff90d3ac2b02a2ae09fa61d59281b961349a
- SHA512 f1b81a3a0514bf3a6e7fdee42ddc86fcfa3a2670893d4b4968ab990f5cf6752a35a0d7b8a1ac95cb32ba861a2423d7a7ff61813ed775eff887e475ff7557a979
- SSDEEP 6144:RTZG+2I/FCelbLqHhZ2gMa2jp3oCvINgk4Am3zIP/8Tdl0gMi/vDMTM9o63Uq9MF:RVSoqbTM3poAIq3ik0gJiH11cM5M+D
- TLSH T10AA4238A8CD64B7CF176207A1C045ABF391B8B9834BBA6ED0CAD7841C69D553D9DE303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BUAA-WaterPoweredRocket/BUAA-WaterPoweredRocket.exe
File Explorer
-
BUAA-WaterPoweredRocket-v1.36.zip.zip 473KB
-
BUAA-WaterPoweredRocket/BUAA-WaterPoweredRocket.exe.exe 934KB
-
BUAA-WaterPoweredRocket/README.txt1KB
-
BUAA-WaterPoweredRocket/使用说明.txt20KB
-
BUAA-WaterPoweredRocket/告警模板示例.wralert1KB
-
BUAA-WaterPoweredRocket/地面站后续改进建议.md18KB
-
BUAA-WaterPoweredRocket/运行组件/nn_training/crosscheck_python.py.py .sh 1KB
-
BUAA-WaterPoweredRocket/运行组件/nn_training/nn_training.py.py .sh 33KB
-
BUAA-WaterPoweredRocket/运行组件/python-requirements.txt29B
-
BUAA-WaterPoweredRocket/运行组件/python_simulation_bridge.py7KB
-
BUAA-WaterPoweredRocket/运行组件/协议文档/ANO帧与TEE格式说明.txt6KB
-
BUAA-WaterPoweredRocket/运行组件/配置Python环境.cmd.cmd .bat 1KB
BUAA-WaterPoweredRocket/BUAA-WaterPoweredRocket.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 2874ad1aba5462441cd8ebfa3c37ed86000137c56090a944ec845bef4b55bf40
- MD5 be1cc678bba9346b8eb198b936ed9b5d
- SHA1 8e8e9c4e9b92e0ccc404737f54ed54b2659c0f09
- SHA512 8282d93fbcc1e9f757f7af09c0c1f50e7e54020182e1a223dd8c4b04cd130ef925319850e2039b84fa2283c6f68cbb0af5fbb19b3f6ecdb3ddcd36196f9c2178
- SSDEEP 12288:i38w4pmKAoxJpjlAbPup5czNsUTXIJmNUEMworTiyjOpuTY2T/n92hgSrFrlUQ60:i36dAovAkcBsUTXlpuJT/nwVynM1s/6
- TLSH T16C157B0A33F49A25D47F87B95961190ECB76EA83D28EFF4D0D9170E90CEBB148D4A253
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
882830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
854KB
Virtual Size
854KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
BUAA-WaterPoweredRocket/README.txt
- SHA256 46aa51dc384e576c35d8c22f269aa26f365600b3fae2ce2f955db65eda2c24f8
- MD5 534cfcf253de1a427c3dedb33ccb6faa
- SHA1 dfccbc7ac95ec28f1c4bf86c029b393852e280fd
- SHA512 f023acad6f99afd110ba72c7aa769f6f48695ce921bea8cc154edff3fc56dc5096fb538dbd0825ecb86c3c0ee249484ce1cc6dad96c6262dcd0bac65637d992d
- TLSH T15631C8F802588DF10B16B5E2051A625BB24EF311873FB632AF4CCE641FCC15DC0A2A51
- MD5 SHA1 SHA512 TLSH
BUAA-WaterPoweredRocket/使用说明.txt
- SHA256 0d9a8a0afd0e6f8ffb76f216025ddd94029dc2af36a626d1423d038318fdea5b
- MD5 66f48d8e31ae3f0b5fea93025c6f2f30
- SHA1 7c71261688008c0d06555a56c3b667d09d6e7ed7
- SHA512 c1ccbdf7e61d960dda7442d27efd34fada925afa095eef9b83b7de5ec5413134a458053d5cb1aecd6526efb7f991304930a7957ba7ed89a729a6940992265839
- SSDEEP 384:la71LzN5xH//8T+536nKSfX2A/U8xaRvrhnkdWecQ2xpIzzZs37k1c:OLzNnH/UTaKDXdU6aRv6dWLQ2DIzNs3f
- TLSH T10D924DFF10599FF8510B00E14395F1AFA10D47ABA6796350EBA28FF57DC88A89166F03
- MD5 SHA1 SHA512 SSDEEP TLSH
BUAA-WaterPoweredRocket/告警模板示例.wralert
- SHA256 e01d5010b750008e78b45e3ca409d471f55958cc3fe552e3ec9d050990c0db46
- MD5 d993944ebea7ec935b64c9bec199c452
- SHA1 61145d415019e2eec4ff78dfd9d22487d153b819
- SHA512 663ebc33752a201bacdd78b6c8f8ac4ca4d2b3ab34dbc04872df8ea2d54214509e99181c888c71273bb71296ad07cbfb2dbd8386a7266dd7073f2cad1de64adf
- TLSH T1FC2163D970567282400146AF0EAE233CC623DDD7E3AA6752E82CDDCC894CAAD4AF4924
- MD5 SHA1 SHA512 TLSH
BUAA-WaterPoweredRocket/地面站后续改进建议.md
- SHA256 c867d92e59a76f9175c42d9cb853648d4a176dc37d9943ed9b834fde83e8e152
- MD5 e2e67a6fbd1996fefb9e8e86e890008d
- SHA1 f43c89d9d754396dfe4aaf2725a766e42cdbb825
- SHA512 5b784c446311a0308c85c1fd3b9e41b906c824f9cf32a9ef0b933f6551bce9768925a5c91237623656d09fd3d14f6b2b9d82bae25d89e9422da174aa44a28b7a
- SSDEEP 384:QNHsPiF60ekyJO+/8OsTuTCtorIi3HA2wh4Pm8XodNOH:0Hsji/OsKTtXc45XqOH
- TLSH T1C5825DBF110CBADD040B56964749B26AB85DDB3BC07FD6C9FB929DAC3E8C46C60D1502
- MD5 SHA1 SHA512 SSDEEP TLSH
BUAA-WaterPoweredRocket/运行组件/nn_training/crosscheck_python.py
- SHA256 9b81b5b51e483a373e0f177ed2cc94c7737c8bf0ebb90c624b0dc42913176381
- MD5 f06083a9fb7ce6fc87550d474b8644a1
- SHA1 770455534e261d1f5d6b8c02f31c7d2024753c7b
- SHA512 b23d681436d357865a01936bab1aba867b0448c08302f741cd2231118bc11e58e657474dc1f38be44dfa23575528ba96b2ccc52680345c7051bd7297f05b566c
- TLSH T1E931C001552F3924A3DB11AC1A04B9305371BAFB27418816B1CF5738DF882BB55372AC
- MD5 SHA1 SHA512 TLSH
BUAA-WaterPoweredRocket/运行组件/nn_training/nn_training.py
- SHA256 5ec0adfe8199ddba40eb29d3941dfc8d8090175813e997327013d2a3e12d5364
- MD5 7236878b9eca01f1e3f4b5b373be74ae
- SHA1 e07e917c6980f6be54f7ad8b2c948fb26c772412
- SHA512 93ce4a69c0319cc7aedaf2116be032c2c674d183166034bff0af4dc22011a79ab711c532708e09032009c9ed660782a7d52e438ae2f3dbaaec4ee3d9621a7ae4
- SSDEEP 768:AHxnFTwJJMAI3EW3z6b46Fb6E8qdHCenlqfF0Wj8V+5j1VmSW2:AHxyJJMAIbWb4mb6idHCeW6X+dd
- TLSH T1DAF2E806486219D1E3E3547C4AA5DA092339789357465830BAEE975C2F88C3E63B8FFD
- MD5 SHA1 SHA512 SSDEEP TLSH
BUAA-WaterPoweredRocket/运行组件/python-requirements.txt
- SHA256 d39a467499f5d16fe19f0ca1c1d9fba18a86ca78268ba106b8167150ee694487
- MD5 516e6ee8ea87fe276b45a760b11b34f0
- SHA1 648f1d6552a1e0b1062b4f3271356ebcfe45efb5
- SHA512 5402b899ae12da63ed363aed3baa11ccca639af72920702ea25ac987bf2cf73d13ba92a5c7e2fce59ddb16cb0dd5e58c9a109548452c711ed34527cf1f005226
- MD5 SHA1 SHA512
BUAA-WaterPoweredRocket/运行组件/python_simulation_bridge.py
- SHA256 afc934c1f69bf5686e446f22db087ba90df62979084dd42478758fd11d05ce35
- MD5 62601a67ff534204697b7f78d1840ef4
- SHA1 779a3b0d148e40eca0c7351db681c5955610b94e
- SHA512 dd9a5af2c7a1ad25023a935bfda1201004c5329872b3c0770bae822d8fb92e7ee582a976035c9136f593a121b22a4bd33362b8e839a4d2a991c289a4cff8f3d4
- SSDEEP 192:kAskq5bTATwfF7eDrYDDlq5JGQzdJ1vz8WB:kA/q5nAIeDrYDDlq5JGQzr1z86
- TLSH T147F1C8211D651515A7C35295DCFE9C111DB2E0432A922E487B8CC6E93F8683FC7F67AC
- MD5 SHA1 SHA512 SSDEEP TLSH
BUAA-WaterPoweredRocket/运行组件/协议文档/ANO帧与TEE格式说明.txt
- SHA256 551d00af3f71bc12b9f4255256e1948bb601840432e9654d6a3209f2c708945f
- MD5 0d463b4d0e34b1a28e90b1e019eacd9b
- SHA1 7a45dcf26b0ded2e2ab749280c0c99db4faa5bf3
- SHA512 2771c6c432c1e2a7576ba50ce1b19a9535f43211ee9e05230529806f66027875088b0a97485a61fd1f29e683fd43add63142c9555f61c066e13e096ee11616bb
- SSDEEP 192:3cqBAblO/S9OL7D2rFEyyswaU750G0AmzWxe+:3cqBAbvAD+Ey/icyl
- TLSH T1A1D11CBA2D6CEDFE1154E2508317E199F06E853B41FC61949FE1DE8C2EDC68C194E922
- MD5 SHA1 SHA512 SSDEEP TLSH
BUAA-WaterPoweredRocket/运行组件/配置Python环境.cmd
- SHA256 6c6c1ab3d666de84fa515329bac7818340976cfbd211bf684703451b4842f700
- MD5 75b00b7fe17385eb7f49e6e8bc9c8b2e
- SHA1 a8a61013338454a163e310a22039e5e2d0021242
- SHA512 55dce49a70630605b6dc8755d3fafa0d8cf91cab600d4b78a5886eea360a242c558618bf3a1cb92b909a6ca76596858dc8e4a6c5083768b46422b392ed490b8f
- TLSH T10E2133223442D0B2A958294FD51F416775E972F703E89CCD38F2E0E49C8D0A17F6DB26
- MD5 SHA1 SHA512 TLSH