Overview

overview

9

Static

static

hyqqkjhsjl...վ.url

windows7-x64

1

hyqqkjhsjl...վ.url

windows10-2004-x64

1

hyqqkjhsjl...��.url

windows7-x64

1

hyqqkjhsjl...��.url

windows10-2004-x64

1

hyqqkjhsjl....0.exe

windows7-x64

9

hyqqkjhsjl....0.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3b76ed5f3a1ee9859a623887ee88295f0823afb15a89e68d920ea83e2dca0b6

  • Size

    2.3MB

  • Sample

    221123-swl53sfe3s

  • MD5

    c9b0aa54fef31a88d596556045a8db71

  • SHA1

    84017179a181becf929f807f268ff273c392a9a2

  • SHA256

    f3b76ed5f3a1ee9859a623887ee88295f0823afb15a89e68d920ea83e2dca0b6

  • SHA512

    4449942dd8e1537021ac3a0dda1192a98aa8bd89ebbcf21de91325d53c25c137f8e3b3dbec253cd53b66dfea89d2f53c9b1b5c4eaa6a325c5885fe1369fbf907

  • SSDEEP

    49152:2OaSeL9TsM9+Cea1hwwe09eyGdi9h0M7HwQKx32QVMXYeh2S:53eRlb1hwweAejdivTz7232QVGh2S

Score
9/10
upx

Malware Config

Targets

    • Target

      hyqqkjhsjl/JZ5Uɫվ.url

    • Size

      111B

    • MD5

      3e8d917d0d10210cd051d7c251bcb9d9

    • SHA1

      92bd693746a70ebf302b1f30afbebe1e3d6f4a37

    • SHA256

      026cee18a5e42425585a1a324fe0894be7cb2fcb1869310ad2a38b73f96e89ef

    • SHA512

      f676fdeb3cb04db79075adb3e5957dc1722d71a6f7edd03f7cb28b3cce60183e52e952f30c74184799350f0963da5ed8b9b69dfee85eaed49dc724c38985176b

    Score
    1/10
    behavioral1behavioral2

    • Target

      hyqqkjhsjl/ʹñض.url

    • Size

      112B

    • MD5

      b72fb6817f28cc91c35322b3c9864a12

    • SHA1

      f075eca15246bc681083f3580b6224d43c02506b

    • SHA256

      e6a86be0cd8f1c493fdb1b9e841255fd36fd12cde26dd2054003603469f08a76

    • SHA512

      672e0794f73c6210558bad9a985c893704d82d4a203a394ed896c132c8d52ae9a32256c8456d29863e35e35b339b57d55835487c6cf37837e6cd3f5b4cf63b8c

    Score
    1/10
    behavioral3behavioral4

    • Target

      hyqqkjhsjl/ԶQQռ以ˢv1.0.exe

    • Size

      2.7MB

    • MD5

      75e19df78c4ddfcf196dc163b69443ae

    • SHA1

      eb93146d667f12191adda8e676b47917d4c8ade3

    • SHA256

      52032273938da89c10388db75f1cd69eda0735a269a35c4c62953ab1aada5837

    • SHA512

      6e3920594911957a6cdca9b2b9ece62c0110da80dd9c18dcc29ebc47694e485497d2e2d360c37a6e38219a51a63d008995da1fa1a1091c694e64283b55947689

    • SSDEEP

      49152:tVA6tVXwTZaqdwk0c05HGiQSzSY5vEU7zQYTDp4hzvrw6XX/G:tKpYqdwkLcHHQsSYF8s2xvrww/G

    Score
    9/10
    upx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    behavioral5behavioral6

MITRE ATT&CK Enterprise v6

Tasks