Overview

overview

1

Static

static

batch CF�...SI.bat

windows7-x64

1

batch CF�...SI.bat

windows10-2004-x64

1

batch CF�...F8.bat

windows7-x64

1

batch CF�...F8.bat

windows10-2004-x64

1

batch CF�...LF.exe

windows7-x64

1

batch CF�...LF.exe

windows10-2004-x64

1

batch CF�...TT.bat

windows7-x64

1

batch CF�...TT.bat

windows10-2004-x64

1

batch CF�...rl.exe

windows7-x64

1

batch CF�...rl.exe

windows10-2004-x64

1

batch CF�...rl.dll

windows7-x64

1

batch CF�...rl.dll

windows10-2004-x64

1

batch CF�...rl.exe

windows7-x64

1

batch CF�...rl.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    daf92961c53b452b1afd6427c43de39bc558e06686f71727c43d2fdd5a3a5814

  • Size

    4.7MB

  • Sample

    220923-dmvcrsgghj

  • MD5

    c3ac464f57ad8d6d6b1dcc62918f813d

  • SHA1

    53b6f75e5a7396ef5fbc5ddeb5ab3a1e5649fc6f

  • SHA256

    daf92961c53b452b1afd6427c43de39bc558e06686f71727c43d2fdd5a3a5814

  • SHA512

    972adfd0ed198db0ded3d80b6981a5df7733eb88d79159010f8a3fdf0be56401a6e74e639d74f421f1470b6a4859d8f695614941ca04ea42121cbea07b73c4ee

  • SSDEEP

    98304:B7n6S/OfXHIC2ZQq29pF0AsiR1CvYOo2gNldP4MAtm+55CMj:YSGfXh2Zo0piOg5zAt7/rj

Score
1/10

Malware Config

Targets

    • Target

      batch CF优选IP/CF优选IP-ANSI.bat

    • Size

      8KB

    • MD5

      0266c99fbc82bae034332061fd37c676

    • SHA1

      74c1c48f75d1a94c8e73a09e4e1e633f16a2f3c1

    • SHA256

      14298a2ebc0d8e4e496110c0c883ec540ed51b4123adf219bb2090c6b0effbdf

    • SHA512

      6eb0a3123c87b7addfd79cb37d4ad4a05d8cef4bd0c3ad2ddfe7ddfb644d6436e5cf2c07122367a65eb1b1c296bdd92a4c95b801d86a5f20be8c0c7d245e7a72

    • SSDEEP

      192:SQZDsKR9sSxJQysi7kG0fkzo4U6B9yUvFO9aMwiVJoci63:J9JR9rui4gHmU9OhiK

    Score
    1/10
    behavioral1behavioral2

    • Target

      batch CF优选IP/CF优选IP-UTF8.bat

    • Size

      9KB

    • MD5

      9f485df1ad1017ad4961c92cd5c163d8

    • SHA1

      e85e493642fc5c783e85b2b5b8260208cec17baf

    • SHA256

      93229e961f3a46d7fb2abbb1b2a36e9cf76153e1cbe7bac674233ee2245f6ee0

    • SHA512

      bb59932c4d38c97b7262d054c84491a82b30f5ff8c49859f8879fb2435526a4a77b0a8f6dc54cb98173e7d54ba4b979518cd6505fba155b888abbea2ba9da750

    • SSDEEP

      192:Ef6lstR0sSxJQwyt2gigtkGDfkzo4OT4heqWFO9ao2iVsIciEwV:uG0R0ri2giJvCTM4O4i1

    Score
    1/10
    behavioral3behavioral4

    • Target

      batch CF优选IP/CR2CRLF.exe

    • Size

      160KB

    • MD5

      62f19a30acb4390f4e58f946b607ecf3

    • SHA1

      54c04b4e4a4150f94f5ecfb5a8abe469553b166d

    • SHA256

      e1a33f614499b77ef07222307434319d60b9b7d09e1dae862835aad24ab2467a

    • SHA512

      1c3db04fe072d789cbdfcfa5d30afedf1147b87b23529218a6b4d5bb27723fa62d9a3efdda26a9931f3caa45f2fcbe809a7ef26524f51d902cfe977952933603

    • SSDEEP

      3072:GlyYfDitAa+O/vT2Jn5szhVGyOPxFcxOwNrrvJB2k7cYLeco1s:+yYfDq8O/KDsVVGDPR0rrv72kWs

    Score
    1/10
    behavioral5behavioral6

    • Target

      batch CF优选IP/RTT.bat

    • Size

      1KB

    • MD5

      de854ec9a6d737b4691b042d2d2c1f7f

    • SHA1

      04ed9942a613889260f4365c07ad903ac6a8b6ed

    • SHA256

      9e60d2fc80ed33135403a6a5e935163460e9c8f4cf79acf72cf1e59f3822edd7

    • SHA512

      58fcf0fc09896cb3edaba2036aeed9db5fbdbfd2c82a1567ca7a22d72e373b9d958f3bf2ae756c8d4e3a0cfa7b069c9df04ffe913d57865abbc5f797b6b912b2

    Score
    1/10
    behavioral7behavioral8

    • Target

      batch CF优选IP/curl.exe

    • Size

      3.6MB

    • MD5

      1773be7802d6cd072a9ea9c354d5a0b4

    • SHA1

      2a436a053d10744db23022a4ae536bf1b11b325f

    • SHA256

      afe31d287996d3613e98e83d72b04ee909d8a3217e1255d20ff5e7c68bcaeee9

    • SHA512

      4ae5c64f9a5b73a9bd49e440b2686ad4054dc1bf910f4ddc872044d3c9547e5903c101a7429af6a46965a70f34a5e9ecc761198f301889204419e0c3d722c1d1

    • SSDEEP

      98304:SBOB3C8RnHIznPeHqaeVYzwWFoe9b9hHW3oAdLX7UxALbcg0jguN1Fe8Txi5pwQn:ST8RnHIznPeHqaeV7WFoe9b9hHW3oAdd

    Score
    1/10
    behavioral9behavioral10

    • Target

      batch CF优选IP/libcurl.dll

    • Size

      1.1MB

    • MD5

      e050d7745e744ff42758b7ebb2f9afb9

    • SHA1

      3ab97a794a06438ca361543c4eb8576dbc55f298

    • SHA256

      24a9c7efd1e966627f3b0e9b365c81c55ee2911e31d909304248c12455861922

    • SHA512

      f297480e6c1c8d439933a2c7c7db75716317f708c3951479f565276a87e9547a7649c594317eaf147424bd713864a79ed90f0d8a20a0c9a4199ea376499bd14f

    • SSDEEP

      24576:LcjPFbnpMciICCLzePgYBLJYv2YY8mcam+g7PSyZPoZ/65NnZph/uTSEAfw:4D60JaoKTD

    Score
    1/10
    behavioral11behavioral12

    • Target

      batch CF优选IP/双击自解压curl.exe

    • Size

      2.4MB

    • MD5

      79a7813790b102b661bc06359cf1122f

    • SHA1

      acd20b86bcf5ad5d81e6535460f687bbba0fea1c

    • SHA256

      eea968501d54c8461d111d01a290cf46d508cb1f94ebfe10a2f56e9130e0ecfc

    • SHA512

      02461378ddba079c62c9194dc71167482cb7acef5b58de15ad78bad6bba6c712d9e9570f4cbcfc2220926f2c1ae09822174aea65376c899bbfb3704e7ddc6f7c

    • SSDEEP

      49152:ajK62NVYBGhpK2AaLGdM03BbXdA3TL2xrsgYXuIjGuFsgaDK:ajK62NVhDK2U7KXxGpzG

    Score
    1/10
    behavioral13behavioral14

MITRE ATT&CK Matrix

Tasks