{"id":"d9e58b4fa83412f34ee5f5c3cec259e6","title":"Worm.ClipboardHijacker — Worm.ClipboardHijacker · 木马/恶意软件 · PE32","md5":"d9e58b4fa83412f34ee5f5c3cec259e6","sha256":"2a6ebbf3901296ecc772eaed7e22b5cfa0e2c316323ac5f74253f63b77823f31","family":"Worm.ClipboardHijacker","apt":null,"verdict":null,"sample_type":"木马/恶意软件","lang":"C++","file_format":"PE32","compiler":"MSVC2008","published_at":"2026-08-07T16:00:00.000Z","summary":"该样本为 Worm.ClipboardHijacker 家族的同源变种（与 db042420 样本对比），由 MSVC 2008 编译。核心行为完全一致：蠕虫传播、剪贴板劫持、UPnP NAT穿透、C2 通信。主要差异在于 .data 段从 4,608B 增大至 13,312B，可能包含额外加密配置或载荷数据。","url":"https://zseceye.com/report/d9e58b4fa83412f34ee5f5c3cec259e6","json_url":"https://zseceye.com/report/d9e58b4fa83412f34ee5f5c3cec259e6.json","html_url":"https://zseceye.com/report/d9e58b4fa83412f34ee5f5c3cec259e6","hash_urls":{"md5":"https://zseceye.com/hash/d9e58b4fa83412f34ee5f5c3cec259e6","sha256":"https://zseceye.com/hash/2a6ebbf3901296ecc772eaed7e22b5cfa0e2c316323ac5f74253f63b77823f31"},"search_urls":{"md5":"https://zseceye.com/?q=d9e58b4fa83412f34ee5f5c3cec259e6","sha256":"https://zseceye.com/?q=2a6ebbf3901296ecc772eaed7e22b5cfa0e2c316323ac5f74253f63b77823f31"},"sample_download_url":"https://zseceye.com/report/d9e58b4fa83412f34ee5f5c3cec259e6/sample","sample_filename":"2a6ebbf3901296ec.zip","iocs":[],"ips":[]}