{"id":"ccd0309499150e378a9fed4cd01a0935","title":"Unknown — Unknown · 木马/恶意软件 · PE32","md5":"ccd0309499150e378a9fed4cd01a0935","sha256":"59fc347dac3dd1c78d62393589818b5417ca041d697d155040988b14562bc797","family":"Unknown","apt":null,"verdict":null,"sample_type":"木马/恶意软件","lang":"JavaScript","file_format":"PE32","compiler":"ASMx86 手写汇编混淆器","published_at":"2020-02-23T16:00:00.000Z","summary":"📌 深度分析摘要 双组件恶意软件投放包。PE32加载器使用手写ASMx86自定义混淆器(非商业壳), JS投放器通过setTimeout('')反沙箱技巧仅在WScript宿主中触发。三层C2扫描零结果—所有C2加密在.rdata段。完成三个组件源码还原+JS执行链分析,全部通过编译验证。","url":"https://zseceye.com/report/ccd0309499150e378a9fed4cd01a0935","json_url":"https://zseceye.com/report/ccd0309499150e378a9fed4cd01a0935.json","html_url":"https://zseceye.com/report/ccd0309499150e378a9fed4cd01a0935","hash_urls":{"md5":"https://zseceye.com/hash/ccd0309499150e378a9fed4cd01a0935","sha256":"https://zseceye.com/hash/59fc347dac3dd1c78d62393589818b5417ca041d697d155040988b14562bc797"},"search_urls":{"md5":"https://zseceye.com/?q=ccd0309499150e378a9fed4cd01a0935","sha256":"https://zseceye.com/?q=59fc347dac3dd1c78d62393589818b5417ca041d697d155040988b14562bc797"},"sample_download_url":"https://zseceye.com/report/ccd0309499150e378a9fed4cd01a0935/sample","sample_filename":"59fc347dac3dd1c7.zip","iocs":[],"ips":[]}