Overview

overview

7

Static

static

3

downhelper.exe

windows7-x64

7

downhelper.exe

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bba674ef9000636c3f448d1215662dd5

  • Size

    286KB

  • Sample

    240308-taj92aba36

  • MD5

    bba674ef9000636c3f448d1215662dd5

  • SHA1

    a47db3a2c9d2328e41a16d08db5bf3433e501fed

  • SHA256

    3a75ade070475b5ee6067c324434a7972455b938420ce0a2d1213bd2ad62bef8

  • SHA512

    585cb106f54d7470f3ba2a945a2e71260e99500bd858dcf5574556e95fd20e6ca4882994583dfe82c58ccadb1fb1fff316aa2d170b52a1764d983d620763379f

  • SSDEEP

    6144:sJ5h/f7Yx/UYI+5McuPTYQirHPdROidq1GWxmjv1KJ:6/E/I+uc6wL1gQpQ

Score
7/10

Malware Config

Targets

    • Target

      downhelper.exe

    • Size

      584KB

    • MD5

      a31b1a5e7af0ce89acdf6cc00057a215

    • SHA1

      49d2ecaf42e99ca3de1a9c9bd76ce267956c7153

    • SHA256

      faf5ec17e7945ee2f56f62c439998c9399b6f6e385495f7ddeda46c1077634b3

    • SHA512

      331d73a14515489a2c966cde8632febc2eb540060266a1251ba2b4c0091e0395c5c637f158ddfd11f50ee592882a960d1985fc58d95b8fdcf02e0404e55ade98

    • SSDEEP

      12288:ZriXi5rRgZ/HAKqdasDofR5HCP5k4WKx1R3/:ZriXwvKSu5pCP519H

    Score
    7/10

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks