{"id":"b17611e8bdfaa73ec4c1f3e768ef3385","title":"Windows Startup Persistence Malware — Windows Startup Persistence Malware · 木马/恶意软件 · PE32","md5":"b17611e8bdfaa73ec4c1f3e768ef3385","sha256":"0c80befb0b31b46f1f0a030af4aef3056806e474eafa8796220056406947bc13","family":"Windows Startup Persistence Malware","apt":null,"verdict":null,"sample_type":"木马/恶意软件","lang":"C++","file_format":"PE32","compiler":"MSVC","published_at":"2026-08-09T16:00:00.000Z","summary":"该样本为 Windows PE32 恶意软件，集成 RunOnWindowsStartup 启动持久化机制。使用 cmd.exe 执行系统命令，通过 HTTP 协议与 C2 服务器通信。GetStartupInfoA 用于检测启动环境。","url":"https://zseceye.com/report/b17611e8bdfaa73ec4c1f3e768ef3385","json_url":"https://zseceye.com/report/b17611e8bdfaa73ec4c1f3e768ef3385.json","html_url":"https://zseceye.com/report/b17611e8bdfaa73ec4c1f3e768ef3385","hash_urls":{"md5":"https://zseceye.com/hash/b17611e8bdfaa73ec4c1f3e768ef3385","sha256":"https://zseceye.com/hash/0c80befb0b31b46f1f0a030af4aef3056806e474eafa8796220056406947bc13"},"search_urls":{"md5":"https://zseceye.com/?q=b17611e8bdfaa73ec4c1f3e768ef3385","sha256":"https://zseceye.com/?q=0c80befb0b31b46f1f0a030af4aef3056806e474eafa8796220056406947bc13"},"sample_download_url":"https://zseceye.com/report/b17611e8bdfaa73ec4c1f3e768ef3385/sample","sample_filename":"0c80befb0b31b46f.zip","iocs":[],"ips":[]}