General

  • Target

    39f41719f83c4870be6ffd84b7417af6

  • Size

    239KB

  • Sample

    231231-rwtdqahdg2

  • MD5

    39f41719f83c4870be6ffd84b7417af6

  • SHA1

    4f5da60492f60f326fe1b243a18732dd43c31220

  • SHA256

    9072a57cf469143a7724db62c3cda2fa73544d27fa283ff8e68ba3619c9b908a

  • SHA512

    8b647d0a245aa4145142bee80b5128b949ef12e98bab3cc315aa5c76682b5c8af2abeb05f7c852941fb18d7da5f9917ebbff218b44a2036caee32770a865c383

  • SSDEEP

    6144:wMfbepbN2nZBz4NfMMPXhlxkmJ74TUUWuwi:wMfbApxNfrvxk87GWJi

Score
7/10

Malware Config

Targets

    • Target

      8UFtp智能扩展服务端/LaNatNdis.sys

    • Size

      11KB

    • MD5

      5dec356646054f4c1cb423b814015d02

    • SHA1

      766558e2e4fda4bb9057135181db412540057eeb

    • SHA256

      36dbd290318845f443b07cfdf5554dbc8fd3f97e7acb84fb3415d0b337ee0236

    • SHA512

      3962a807fa4295791987a27bab5f6cef2a5cfadb6cf655582c403b4dd4957f07afcb8f75c54546ee17b8435478d145bff0b463cf5fd19867b3be221bac9660bd

    • SSDEEP

      192:OkHrYVAAQkVSIoKn37Iq1QG2kwTk9VCp2ATT8/Z8X0ysfbiNJ:OkHrYVlQ0CK/WVk940W8x8SfbiNJ

    Score
    1/10
    • Target

      8UFtp智能扩展服务端/Rar.exe

    • Size

      145KB

    • MD5

      a072df4b4a510c250a64b3e4a9aa8f19

    • SHA1

      022cb194ee77368ad517f6bd4cf250203ef6fac6

    • SHA256

      e4fd95b5019bd72a503d351248036a8bc23033d77b5fba3e9cffa8e09f65fa7f

    • SHA512

      93feeba3adc423fa92ba00308b987441a9405d80fe3fcdc536a6e82cf268b486f03363d6c0f2d659cf3654737bd989451aacc08f032d20963e6355739c91971f

    • SSDEEP

      3072:zHHLZsbTh1R+UsYIcJ6ANpMKElWVs6T7fmC:zHrZsHFYcJ6ANpzElWya

    Score
    1/10
    • Target

      8UFtp智能扩展服务端/TFtpMangr.exe

    • Size

      80KB

    • MD5

      5d2785b5a6c4b3a8b0ef9b1ec656846f

    • SHA1

      d2e86e74e9df1ed5c2970d79fac20dfb8624f980

    • SHA256

      cfa634203f38bd19adbee2d28ede982f0fe0fdb238b848e6c97f286d9197f98d

    • SHA512

      121e8216b9e478833cfaa3d975a6078ef8e922129d6d7aca1a430713937b90bfc5b5275b5a9cb8c929050c35040a0041e7985c4a5605d30030d1db17c1577e98

    • SSDEEP

      1536:FX95vnUAJ4g0R+UWqSpJVRA2sXNHlxhGOI1BGDU:FN5fUX8PqStRA2+l2bGw

    Score
    1/10
    • Target

      8UFtp智能扩展服务端/TFtpServr.exe

    • Size

      92KB

    • MD5

      e4e4603392a0d7f15ca1210e3f40d181

    • SHA1

      f5587a047dbf1c52867ec50d945f5960462a540b

    • SHA256

      7fb4f3def93e63ffd57c2fdbe67bce4b829a4596220b34e4e536dde2d4d94f85

    • SHA512

      e8772d0b95b60294bbbb412256542a888d8e3dc5a5002d933ce8a917c0ee0a2faa504a60afabbd82239d989452aecce9e2e6ff60915551b4ffafbc2fdbe9c73a

    • SSDEEP

      1536:rLwGq0GAOI/YyWCy4yKLiCNblWSC3z7ZgVJC0ZgMZFEdq78aIoZVO:IrAOqpP+Co+WWSqlO

    Score
    1/10
    • Target

      8UFtp智能扩展服务端/XCPTHLR.dll

    • Size

      68KB

    • MD5

      9a685a80e82111e79b985d47fd2475f2

    • SHA1

      e91175e2d16de7c4efda27305047bb40ab5d6751

    • SHA256

      08779056c9d0810aed6726156e753bbd63efb95398a78b2f772bde6d83aca60e

    • SHA512

      db674a330ab40be56cdc064313e9aa18592bc8d54670b85b335f1f96f9aced2a85b56ba72bd0d07c1661d228b9971d0aaf56244d7b5d7d8e38a360884994d27e

    • SSDEEP

      768:rH+ZYBi6HRkIAlTbzERtXiJNWJ1ETUCSKocvMtZiB98/sgQx9atx/J38/b:hBOTboRMWJ1ETUWoci0qtxRM/b

    Score
    1/10
    • Target

      8UFtp智能扩展服务端/新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10

MITRE ATT&CK Matrix

Tasks