General

  • Target

    9239931f6208be5b6e934b6aad575952f28cf90eb8887d9c09c8014f374c0619

  • Size

    4.0MB

  • Sample

    220902-d5lhksfegp

  • MD5

    a429ca279ab06a2e21c77ada2a79ff3e

  • SHA1

    a1c23e183b2c43ddcb3ce0ed44a5477834616ef2

  • SHA256

    9239931f6208be5b6e934b6aad575952f28cf90eb8887d9c09c8014f374c0619

  • SHA512

    d98a0f4ba08af5e588837b13dd285a2fa0eb929b0be000e003a9b0d62e6da12cdc18b3c4c010437ffdd42a370d0456a78d39b76f39131a6d1fe259c773ee57ed

  • SSDEEP

    98304:+f1cs1yLtb7BjPG5Yi1N6kZc462W8i5T6UUpdcs:+db1yLR71G51ZDW552/pdL

Score
10/10

Malware Config

Extracted

Family

joker

C2

https://pcsd-pcmgr-ldc.oss-cn-beijing.aliyuncs.com

Targets

    • Target

      CommonPlugin.dll

    • Size

      3.6MB

    • MD5

      f028b00039daea93d4fd55e7371cdd92

    • SHA1

      720ba4c4965ebb75d8ca0b9e7f899772379d93ba

    • SHA256

      9cf6ea864be27300788003e51e92284744f2e38a0c495171e0c66a45925f32bb

    • SHA512

      fefd380ed2f36a002448f9ea39c3cca760a5ea77e534f764f0d53135e9d978d872327708450c51bc685f4d0dee8b0186999fc5c50b3ff33c9147d4d27eaafe5d

    • SSDEEP

      49152:j5JfcM115Va5KFHLOsQAj3vSRCxMCOIy06qgxGKliophahsP+9zCVAxqukedT35Y:dJfcM1Fa5EHLOsQAToCeGKMUo2hez

    Score
    3/10
    • Target

      GamePlugin.dll

    • Size

      2.9MB

    • MD5

      651a491c8a0e82f8f9c445de25d94ea7

    • SHA1

      da9c800e0b59a0b2065caad718d99156692c1cb1

    • SHA256

      909d7e8d7764e3cf8864e167589dcccaac24fa51a1104d5cd698c4a861e251c5

    • SHA512

      425a49b39a4aa09fa55781dfda5e3406cddf80c765c8d3dd1f76b180d269d70d33fe6dd6d1000964cd484d69d7dcf4f979f84e7b702bfcc3c9cf53751086a1d3

    • SSDEEP

      49152:OBLGnxELQe7Bb5vZ3mfGsiWlE5TtIMdKoh+P8zyDLL2DA+X5f2Braj1Lnt:wLGmLVmM4waiR

    Score
    3/10
    • Target

      PCM硬件能力判断工具v1.0.exe

    • Size

      30KB

    • MD5

      4817bee2bab58459ecc64ef3beef681d

    • SHA1

      be048fd958a21d4367767dce9203b26ec68b45c4

    • SHA256

      97a54a7b90c7fb6bd255f6fb9c2ddadccc553b0afa98c8bb8f65a89140efbf21

    • SHA512

      bd8ae12fc8aaaeb8fab4029c0b14cd69374ff0eecd5546538861099e16348143899463229737b10d1e1494115081702df21a4ab4b70c2a3ab30e513e17d3d2a5

    • SSDEEP

      768:ouVGFhXHyonqn1vAAAbT1ayMfFZNx1V+JCTwYcEH5:8DXHyYqn1MbT1ayMtZNxXpb5

    Score
    1/10
    • Target

      VoiceModeOfOnlineClassDLL.dll

    • Size

      275KB

    • MD5

      082390fdb977a269ae9c0734c103eab7

    • SHA1

      adf0c8b4c6c2d55863c54cfd5b09e7ffa9c017c6

    • SHA256

      a2a025d5d29f9dc6dba5128970ceef7a56db2fb2dd941b07687ef26e38c7754e

    • SHA512

      a53da74ef44d3e39d78a47ad39bc14857f0aa68d8dc6151d30899baa36b813b8714cce275a714b28c33b432366c56f01472c5cf37d1197a3b4f4c5ff70a06591

    • SSDEEP

      6144:2NU2HYShobbOm9wV4gjosd1VgK2YVRBblj9eVkpTzb6D9O5pFHWlxssVa4r3V:X2HH4Sm9vgRTF2Sb197bcO5XHklVR

    Score
    1/10
    • Target

      WrapPlugin.dll

    • Size

      3.7MB

    • MD5

      c034f07588f318bf683796d93c2e0203

    • SHA1

      61474f44dfb11c5e2a46abaad107d7baccfb9f8b

    • SHA256

      79683ffdf56b33a267770fbf02ed363bf37d4e36020506117adc27e0cfb2e81f

    • SHA512

      5e29966ff229a650d97266e736ff065cbf3a9dc123fd66c73238c0b1ebdd110411797939492a814d0d6509efdb6b136d51bddc439a2f917ec93139e78b8f8f87

    • SSDEEP

      49152:GJlh/hxLKXUM/drnJay8wfnfch1gbla5XzHeWY6olydYbMpPSzNGvYpgMP1Mz2K0:QlhHSdrnJaNqJavkd

    Score
    3/10

MITRE ATT&CK Matrix

Tasks