Overview

overview

3

Static

static

3

川雪flas...sh.exe

windows7-x64

1

川雪flas...sh.exe

windows10-2004-x64

1

川雪flas...ae.dll

windows7-x64

3

川雪flas...ae.dll

windows10-2004-x64

3

川雪flas...en.exe

windows7-x64

3

川雪flas...en.exe

windows10-2004-x64

3

川雪flas...��.exe

windows7-x64

3

川雪flas...��.exe

windows10-2004-x64

3

川雪flas...��.url

windows7-x64

1

川雪flas...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3d21f14c438b139487b772407b1a2760

  • Size

    912KB

  • Sample

    240101-r7aezsfcf6

  • MD5

    3d21f14c438b139487b772407b1a2760

  • SHA1

    60ca6a9bb0a64e526f0e6af4fb6f5aa40d4b65f6

  • SHA256

    87319e464d24195aaaeed4353371b577cbb31baf41fa898d58a5c9d4475b12e3

  • SHA512

    da79da8aefb181306571a65b5bb5b7b1bbb9f8f49703861f373b1fd4b1e7ef83bee1f2df78ead8a0953487bc543d9e1e68843a71f15606a271c70eb75141f6b4

  • SSDEEP

    24576:M2A9T+Rn8lbataIHjpBmxdQjSn0ZQu9hGmJTA2vNfWrJSh:M1R+qOa6pBmrQjSn0ZQqHTAcNsi

Score
3/10

Malware Config

Targets

    • Target

      川雪flash播放器/cxflash.dll

    • Size

      792KB

    • MD5

      25667aa2b0e0bccd0b8861f4318398bf

    • SHA1

      06de7152d68a5ffb186f014830a6282dc6fdf2d4

    • SHA256

      fc546aa43951e5bd679516b661b7525539c15e805917c377411df1a1a8ed261e

    • SHA512

      a4bbfd9f1bbf2a90b6d836ac94ccdcca3a7ba8a748645ca2cb67ed4ecb00072124fe6fbca0b6f3828071a7f70bd36cf0e4101ee461e4ecdf4d1f11f6f755cdf0

    • SSDEEP

      24576:6mTDgRSCj6OCZad9zHLp5PoJuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuIuuuuuH:vD293L9Dzmuuuuuuuuuuuuuuuuuuuuud

    Score
    1/10
    behavioral1behavioral2

    • Target

      川雪flash播放器/sae.dll

    • Size

      115KB

    • MD5

      0c190aa09e5989bfb4df9489bbd5619d

    • SHA1

      108646a5275aed7306b311bfc0750f24412511f1

    • SHA256

      6f7a5b7ed80d5c373bfe5ddb1f7fdc42d40e6de5ef51c17ad2d5d867118d04cd

    • SHA512

      c0cb6e885ce103d73afadfe7b981a3e92baa97da0f41c6eb50b006be97e56d2c40af26db39103d19b7d6489e2d8bc85c9f59b09b1b60fa795bb2147829c7bedd

    • SSDEEP

      3072:Iwz4M5Ymdz8yYg8Hb2sC2uJLvudSmR1lIht6pBTWVRhKI2U:j0AeyY02xRuY7TW4

    Score
    3/10
    behavioral3behavioral4

    • Target

      川雪flash播放器/screen.dll

    • Size

      396KB

    • MD5

      e2fec74bae440f0fb339ec0ff45e18d9

    • SHA1

      b6bbebacd60b1689dfdfc0edc959589a9830e223

    • SHA256

      b3ff060bbe0811feb7c3f25a5fd04f21cd30d5bad5016dc768d4bef9aff9ffaf

    • SHA512

      8bae0e83e5938009bf137b60303401f7489ad07502fe1e6d6de24db74f1c35241dded3e15b3cf506fa0e3efd790606e8be3442095935a9c26848ebb06075e2ba

    • SSDEEP

      6144:HvM+2K/OzVn8fIEd3T/jIJAyKn9r7kfSg+iLiwGR2JY8zOZBkBF:UTK/Oz18Njnx7kKriLJYgOBkB

    Score
    3/10
    behavioral5behavioral6

    • Target

      川雪flash播放器/川雪flash播放器.exe

    • Size

      1.7MB

    • MD5

      1b914563d6539cd550a0011ec6c31e40

    • SHA1

      5fd3128b6fb07a9f014f767d0a7875e4362d6aac

    • SHA256

      b24cfa827abb7cf8b9a2cc935e287929c3074210c2277a27bfd683deec914d9b

    • SHA512

      778766ab9714a4446656802ee42db2a185ea692f1ac0464aa0c5f51847dbc3f1ca49d7924b1035352256695fc33033f8ce841a67615e2bb4bcb201fd3f807298

    • SSDEEP

      49152:Awde7hgYpKD293L9DzmuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuIuuuuuuuuuu+:q7yD295Kuuuuuuuuuuuuuuuuuuuuuuut

    Score
    3/10
    behavioral7behavioral8

    • Target

      川雪flash播放器/新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10
    behavioral10behavioral9

MITRE ATT&CK Matrix

Tasks