Overview

overview

3

Static

static

3

AutoReply/...yW.dll

windows7-x64

1

AutoReply/...yW.dll

windows10-2004-x64

1

AutoReply/...Vw.dll

windows7-x64

1

AutoReply/...Vw.dll

windows10-2004-x64

1

AutoReply/...ml.dll

windows7-x64

1

AutoReply/...ml.dll

windows10-2004-x64

1

AutoReply/...nt.dll

windows7-x64

1

AutoReply/...nt.dll

windows10-2004-x64

1

AutoReply/...��.exe

windows7-x64

1

AutoReply/...��.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    7ed1e38389d8eb47faba86f4f57deb1f

  • Size

    9.4MB

  • Sample

    240129-ehfjgsaggp

  • MD5

    7ed1e38389d8eb47faba86f4f57deb1f

  • SHA1

    4a318b03efe94968ba3a6a1f88911d4eaec4466d

  • SHA256

    21bd81468524637ded24a3d2ef3e9ccafb8cde6cf01031bff89097a66cc4cbf7

  • SHA512

    af8e71d92f2a0275c4754fb10c13a588ae14c0749206eb69cdcc2a647a21b8e3a2d59256566965f83b8ed1517f92fb80187e36b9d28ff6c0e0c2102287ba5337

  • SSDEEP

    196608:skTHMopbrq0UsjipzENhbMsJC+hFBae6Vlu9THat8pIP2dhLrSifiXP2Kb4XlijA:JHMvUNysxVceTHp+P6hLrSikpTjA

Score
3/10

Malware Config

Targets

    • Target

      AutoReply/FeatherskyW.dll

    • Size

      36KB

    • MD5

      0d112233b172604cd372192a84d66628

    • SHA1

      865599a813014a4208927ca398e79672ea532933

    • SHA256

      b17817ad517702c34406b8e860d2dda48d3510c1a86a5673b533ac9121acae1a

    • SHA512

      39312e103dbfa0f312ac7a67004c517dd991a83f2fecfdca3ce9a7bde0dcd19e0a6d58cd8e2f7d046f2a250f28cc67267819e6696da9ca339f5b67fde6def75f

    • SSDEEP

      384:Dv4CpwrzjkzXAmTVzm+qqml0INoYvxyMAef0e3skKjvXoLFGPvFuUO:z4ZQ8mTVa+tuvx+ef0eckeXoL/U

    Score
    1/10
    behavioral1behavioral2

    • Target

      AutoReply/Interop.SHDocVw.dll

    • Size

      128KB

    • MD5

      c34e2f60d58e86d5dfc0690df39d5934

    • SHA1

      b15aab9b75ca32466ff242a0e188df11169ffce7

    • SHA256

      5ce1cc4f53c8aee137118b808ab2d27831a6adb28372e7915e08a56d6119a292

    • SHA512

      c3b354f8b7ba5d68ac1c0a7ba83a645b88d18af46160958aad81ab73135aa9f9a2ce78f08f7f5943e33dec09cc35bd91380a02ab50bdbe8805251e3d52c41f15

    • SSDEEP

      3072:hNknBRM2HsdCzIJO/01arQhkz2+psvCNATWR0X6VI7OZc/S9QjmBknKFYLmXwqUc:hNknBRM2HsdCzIJO/01arQhkz2+psvCa

    Score
    1/10
    behavioral3behavioral4

    • Target

      AutoReply/Microsoft.mshtml.dll

    • Size

      7.6MB

    • MD5

      00147d54822daa3dd0efa11905096ddf

    • SHA1

      93b37dda5f95a1f2f10f12185f5ba27f8dd17e47

    • SHA256

      0efab9e93e2d6e0ec91dec098fa2b651c66f669d56b7fa53f565d1d2a814058d

    • SHA512

      993647c6f0b02025006ec1debd1d62eabdd6ee7734eb0c31cb94e0de673874f79f6952f7f16651d03e98506f3e2d5ec438e8e814a7d939f86eeb4df38fd64338

    • SSDEEP

      98304:6pkg8hn8ZiyAB84gPjKVuH62NhND7BMe8AlZ:6pkg8hn8OStD7BMe8AlZ

    Score
    1/10
    behavioral5behavioral6

    • Target

      AutoReply/System.Management.dll

    • Size

      364KB

    • MD5

      0631ffa1ea2f95e69d08507d65f1ba96

    • SHA1

      e63764dd635f8472d9938794e8670134c0643d6b

    • SHA256

      9851c7ab4fa6ff9a0f6603aea734f3592d8cadd0d1e5c1b0cd4a623d2b2fb864

    • SHA512

      1be7456cd390eca8f6cbd5bd7f849b32d9322aabe947fbcd77715b9e2a8f8cbb5e385f3dd1752f457cfb9a747c641988fdcd666388fbe491f25f72132b136eb3

    • SSDEEP

      6144:J320lZyqFZbSQsPUyRkKvc6AKW7k3sDuLyLQ5b5BbT6TCpUQx+kgqtWt6k/Dr7hO:J32KyaZbSQsPUyRkKvc6AKW7k3sDuLy+

    Score
    1/10
    behavioral7behavioral8

    • Target

      AutoReply/懒人聊天机器人.exe

    • Size

      532KB

    • MD5

      f35368933c690feccfdc2d00918ab63f

    • SHA1

      05cfdce59d56335c7ff9def6cb0779702c8bd0f6

    • SHA256

      ce91c41c320981f5b3de46b7a843aa85819ee1deca6999663ff7536f92d5a123

    • SHA512

      33128014c596f0615e29bdef350ec0fb2c89185f6b95a1c2e603ec04358beb8543e0931aab0bd0aff2e70007d93d611a4b3156a6e5765ae03dc8555273b2214d

    • SSDEEP

      6144:j6Ab9cTtNMFQPUw9ztqMyo8T/ZS/nmBl+SWVN0JtVQUUoaYi:j6AhcZeS/87GnmB4uQUE

    Score
    1/10
    behavioral10behavioral9

MITRE ATT&CK Matrix

Tasks