General
- Target d8f54575aff075268200250b3ed4af1da894db2199432b7110605003c6afba4a
- Size 319KB
- Sample240207-qlmmrahhgr
- SHA256 d8f54575aff075268200250b3ed4af1da894db2199432b7110605003c6afba4a
- MD5 a0e268be651237d247b00de5054d46ef
- SHA1 cc7f6e53b4e43ec5e37b03eabd07bfbc5ecef180
- SHA512 79b39b8b1a474ef252e2e0a8ee93c2c0eabb6af617b00c01feb4062a9185f4be613eba32e3bf5aa828064b895909faabc5836af1976490dbbe6f94eb19963f43
- SSDEEP 6144:khSoctB/Rul9dnOlXnuD4dU81CZWKie8TYS+dHJptZTjjoVi+nofGC94J:kGn/ROO+D4dUvqYS+JTEiNlWJ
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
220509 - (Cabinet Meeting 2022)/Increasingly confident US is baiting China.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
220509 - (Cabinet Meeting 2022)/Increasingly confident US is baiting China.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
220509 - (Cabinet Meeting 2022)/libcef.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
220509 - (Cabinet Meeting 2022)/libcef.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
220509 - (Cabinet Meeting 2022)/~.docx
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
220509 - (Cabinet Meeting 2022)/~.docx
Resource
win10v2004-20231222-en
Malware Config
Targets
-
- Target 220509 - (Cabinet Meeting 2022)/Increasingly confident US is baiting China.exe
- Size 397KB
- SHA256 4761183bc8bff993a5551916eda73c84bb8f9eadd24c4c19587045bb91609a83
- MD5 c751af3a2b5e5085e0cf4a66a09480d9
- SHA1 0d451c8ee760d3fdf1233b44b657dc10e0450bb6
- SHA512 bd88ea76db942b4fd865ed986be75d6df6a90d10f3600a4c3f330a0d7935b1906b536a2eb2cc0211dd199bf2a37440d0a8febbbe6c6ad9b9027e6e59c9511e01
- SSDEEP 12288:n5RmQFpKMFeO7Blp/B8Z7QZLJZpT6672GbziER839l/d6LYE2B38jqLX:Z/l839l/ooEC
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Adds Run key to start application
-
- Target 220509 - (Cabinet Meeting 2022)/libcef.dll
- Size 190KB
- SHA256 966ab1c468e3fc7d8d8b2d73a9ca9a85d352a0db8043c5eab36dd304a5915812
- MD5 268d61837aa248c1d49a973612a129ce
- SHA1 1da0d7053ace976847cc2c9ff783743195178013
- SHA512 ec9015ffb5d7f5b545ce30f91314de961757c1f885ef3a66a7b918418f48cfbe38dcfa9d2ac9c8969469560d50696a55c8a9d5b55f58f675e1248b7328ccbcaa
- SSDEEP 3072:GZyxSazBuliXpfiRFc/E4RqaHH+h2hsD1ZeTir6l9ZsyBtPUb:Gn4pKrcZqWH+hGsfeTZL
- MD5 SHA1 SHA512 SSDEEP
Score1/10 -
- Target 220509 - (Cabinet Meeting 2022)/~
- Size 150KB
- SHA256 0f80fb8dd52c9aa22db0212cc6ebee8c95f9ff81cd281dfe6d89a3edb0e7c983
- MD5 cf75e2ab9caeefd678039acb3fadf657
- SHA1 52625f8def2441e441bb2de1099f2d78b4dd2d4f
- SHA512 b560c00c8c4d8536409e55afc78a7b7268113849e5d218ef824f3bd94b8d411b1f049c0918953eee20d17ea53ac767101ca4127b192310d1a3cef63ecec81201
- SSDEEP 3072:wHLfryBHGy7RXXz5ij5S0pOvBGAmf08So3qE5aztUm:wHLfry8ylXdwVpki09tn
- MD5 SHA1 SHA512 SSDEEP
Score4/10