General

  • Target

    bccc1dd268ce3e9d90b9f86de8878764f4987051a954c0ff7b3ddc5ba9a4940d

  • Size

    3.7MB

  • Sample

    221126-xbzb5afa59

  • MD5

    a48186d29d6eefd7bc8334a206247012

  • SHA1

    ce353f0c3b16bbe52e8eb8c99be6833852c3b955

  • SHA256

    bccc1dd268ce3e9d90b9f86de8878764f4987051a954c0ff7b3ddc5ba9a4940d

  • SHA512

    53c7e4aba68071a7b346ce517d443f92e97df53c67a2fa37f0ace9df5fe63a6dc08ae868a6b2cdf7534607385bb77f1907ec6716bb1aede0afe259cdc68e389d

  • SSDEEP

    98304:RPWWSgkjGJisC+WB41ElNmEukYeO0aWNlIPy:tkvuiKqbzu2lWy

Score
8/10
upx

Malware Config

Targets

    • Target

      Cain/@绿化软件-6年专注绿色去广告.URL

    • Size

      318B

    • MD5

      a872aba08fdb224cb87f48e333c6d61d

    • SHA1

      4de886d991f7e2494666f26f4d3fe864bb17cbdf

    • SHA256

      06d676051b2883703cefb185ae90fd9e018470c776c2474348f561ca2f4b7170

    • SHA512

      2dcb26c4199fe2022d2be167fbd6d352761b2b60e81bd037a9cf927790348b31208ab905ac10eff47c24b8acd545be9099da75db4e207e44688da6d14813d58b

    Score
    1/10
    • Target

      Cain/Cain4.9/Abel.exe

    • Size

      27KB

    • MD5

      f2017531ec0052d09615723566ce33f0

    • SHA1

      70819a97fa1dc22236b7b0d451be0d5315b5d513

    • SHA256

      7f0904acc5c9f0a41196d1495505bd75fdc5f3f5265952904efe3393a047e5ea

    • SHA512

      8f6a149115ba3bab6bd98dcc7183efaa0331115beaf4d69dac2657d3cdb6164bde357aa536666ec25722c2ce2993fa1216d607a8afccc8b54f28e87cba8aa33f

    • SSDEEP

      768:461W/SJMPd0Omkb1XRv2XxJnUWTna4eobYwQNr/9gFn:46cqJMPqObWvnfa4SNNr/9An

    Score
    1/10
    • Target

      Cain/Cain4.9/Winrtgen/Winrtgen.exe

    • Size

      188KB

    • MD5

      1d094ea07cb193e7e2c31ea043c51a88

    • SHA1

      7b3a681930ee3b11ced941c03c8fa44173bbd021

    • SHA256

      773a8ca41ff7e1b37904c637141e3dc70df0e46db824044588dca9c9c1fa364b

    • SHA512

      55c2e930a680a9fa966d664472f7fb84438d35275c00a8049bd1141a5febeee6b506e267ed0f243eefd7612ef8a2124e1e916e7472d115a5fc1f7b7b0dd322f1

    • SSDEEP

      3072:U6bclkApdQXw2Nw1ZukPbQnO2TvEhQ6Ad89pPzy1F3V4ZeM/wGa/JVbJLDDKK:U6bYkApdQ9XkjQOnAd89Vzy1H4kM4Z/8

    Score
    8/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Cain/Cain4.9/svchost.exe

    • Size

      1.3MB

    • MD5

      6d5f92ec615ea3da90532fd514678e05

    • SHA1

      f59d7138396815d3f32dced0ab0719aebd473125

    • SHA256

      83dbb79d4a7bd2720e3339ff7cb1e8add7d45487f8f48bb322938ba8d9879eb5

    • SHA512

      2d29839a8d68c55e17162d3ac8f90e381de7989c3ebe8f84f06c95332d7d9fb8afef8d43769f085a05d993663155508f2cb23c7b510f759d2bf71766cb2b9596

    • SSDEEP

      24576:e6VaqHF2AOSQGplV+on6o6HVsr/Dpn0tx/NZl9NqhUUm6Nd/JimM0bFwuwzISYpf:ePy2g7lV9n61HVsbDpnMx/NZl9NLUdxh

    Score
    1/10
    • Target

      Cain/WinPcap(32位).exe

    • Size

      549KB

    • MD5

      9e4d67da9b90b7c891dd1f6604d1001a

    • SHA1

      0585618726a706d2c543348be4645069cec31d6a

    • SHA256

      d36c2e18cda80736110b69edc7fda8588f7bae5692e17c2c51a59edde1e71d6c

    • SHA512

      7e1492716f5a55e094adbc2e25b4e160d464fd701f6b1ad614ceaf8b626ebe568ef76c9d8b725cfa85a8904dc1c93b536187090693f8d5defc3481dc2ded7f7b

    • SSDEEP

      12288:iwCkgCw+qCApt4TCeBJXPDRJBCMGb/wwU2PrQOlzqHC/:iwCkr+CAf4TCo7RJ8M24wDrQOlzqHC/

    Score
    3/10
    • Target

      Cain/WinPcap(64位).exe

    • Size

      893KB

    • MD5

      a11a2f0cfe6d0b4c50945989db6360cd

    • SHA1

      e2516fcd1573e70334c8f50bee5241cdfdf48a00

    • SHA256

      fc4623b113a1f603c0d9ad5f83130bd6de1c62b973be9892305132389c8588de

    • SHA512

      2652d84eb91ca7957b4fb3ff77313e5dae978960492669242df4f246296f1bedaa48c0d33ffb286b2859a1b86ef5460060b551edca597b4ec60ee08676877c70

    • SSDEEP

      24576:UBOldyR6ORWsaM2QROxa6jsqUENfJjNK/CG6niqiL:2KzqWsayROxa6QDENuaG+ifL

    Score
    3/10

MITRE ATT&CK Enterprise v6

Tasks