Overview

overview

8

Static

static

8

『兲籁....exe

windows7-x64

8

『兲籁....exe

windows10-2004-x64

8

河源下...cn.url

windows7-x64

1

河源下...cn.url

windows10-2004-x64

1

淘宝热卖.url

windows7-x64

1

淘宝热卖.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5d5a1f618166e862552f26da1e3f5fc3b0bfc2bc701c87b460ef95402ff4b9f

  • Size

    2.5MB

  • Sample

    221124-x8tg5shc41

  • MD5

    3791e214494fa2db2e2116052fb7d4cb

  • SHA1

    a0f5a3375691fdbc3f145dc1e18734dbf43b2ee1

  • SHA256

    c5d5a1f618166e862552f26da1e3f5fc3b0bfc2bc701c87b460ef95402ff4b9f

  • SHA512

    f9ba96d5f0039df8ca8b6756c7abcbc15732432349eff7614237ec09bb57e6e0dbedb9436dee883e9c1fa577829459203349b2a067a3eef812ea8577fec0945f

  • SSDEEP

    49152:2RFB1om8GeIQuXfTS1TkUxYiglzSDFjjUTcRViq0iIe+3QgHL2n:XpIJfGxYPEDFjjC4Viq01e+an

Score
8/10
persistencevmprotect

Malware Config

Targets

    • Target

      『兲籁莇掱』拾仴②拾⑦.exe

    • Size

      2.5MB

    • MD5

      3c4fdb852e606c6af637b59176f42652

    • SHA1

      b4347cb438f25fcbecb379769234f1e1fbdc4e5f

    • SHA256

      8c776ac38f517c2b1e794b4645e347c6ad89091a6e39b97efd1b066431c12a8b

    • SHA512

      51df57eb65db12d6fb7a2c0885a71826edd0c36d750f407dd052057335ebe3132e1fb041f101ba997a6a0898e9bc7e3f9abd4f92759ce0316c5592fa45c7a7fc

    • SSDEEP

      49152:Y+vktah2onkYCZpP8bG0auXFQGnTXrAC5zGwlrMydQvoqnK7Lc4:Y+ctah2oCzEXFQ2XrXGuMydQvoN

    Score
    8/10
    vmprotectpersistence

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

    • Target

      河源下载站-cngr.cn.url

    • Size

      110B

    • MD5

      87d5540eb47b60f225cc6d5e9ec5d3b5

    • SHA1

      bb87c8cd2721eed95ed96cfed3c23a71dd636743

    • SHA256

      7503e8e9530726e8934149fb2afc1a9638d8a4727cc05c6bed1c1b1539dc43fa

    • SHA512

      ed81acc65c042f99ed20b511a755606e13619ddbd7e05125ecbcf5342ac9239329184d8b1b45d47ee4fc0ef4c62e06b2bd806b73f0f5c852173798e76d23a951

    Score
    1/10
    behavioral3behavioral4

    • Target

      淘宝热卖.url

    • Size

      384B

    • MD5

      959444600790e569e917523917654610

    • SHA1

      bf62acd4e2059dcdf7dbe9b1c343a436212ff784

    • SHA256

      3f5d98f266fa246282bbda9fbe2872e1a6c28452a14bb3b2fa80b8498ceb9f93

    • SHA512

      982c307aaa05bac10e079e4bc59aec4adc64f5c48a70dd67d57379e7e4e36af63e77450d55a1c895dc9dc26601cc1e9f11353378d2151f6486f480cdf6f0a9b7

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks