0304f26bad00a448e3dbce5e513011bac14a81bb5cd5ebe309a44fe0bbc79452 | Triage

Sharing

General

Target

f0c9076c80f02dfd73c5449b11ddbc6f_JaffaCakes118
Size

613KB
Sample

240415-ly5a4sbf49
MD5

f0c9076c80f02dfd73c5449b11ddbc6f
SHA1

264880f5353c546c9cb0f8de6426e5d8c0445b47
SHA256

0304f26bad00a448e3dbce5e513011bac14a81bb5cd5ebe309a44fe0bbc79452
SHA512

d4734b0e519307b0152394a7d32c09edc7cfdcf1e0d3848f23bfca5cf873128943420746c0f0092295394d28daa11fc244a4719e51b5a77913069fdd65179a37
SSDEEP

12288:KjNLvLdk9fG7rTk3xKfmqNM6C9kF0su1Ta5eoBazKRT4be90qlWTi:KpLvLGfeTSIOq5ykFBf5eoUKT790SWTi

Score

3^/10

Malware Config

Targets

- Target
  
  QPPressKey/QPPressKey.exe
- Size
  
  632KB
- MD5
  
  5596c86a7af1325fa6f963ecaf090621
- SHA1
  
  1e3b7dd70f283b7a37b8a80897226ddfc119cc47
- SHA256
  
  518122b21a4b058d2e364164dd00ee9897a8729d3d25c00b63a7ad4ab33e0ca0
- SHA512
  
  d101de792c13f57b1010260f8113effbaf8dd3ca12e94c2cb7fff369553fe5db68e3f1a85232d54b86291abf5fa7425f25a887567c1e5687cfe6b81e7a474736
- SSDEEP
  
  12288:b40HjHijHVEdCFQN/wFMiYM0HF3Z4mxxtDqVTVOCO/BU:b4UCz9lYpQmXsVTzT
Score

1^/10
behavioral1 behavioral2
- Target
  
  QPPressKey/新云软件.url
- Size
  
  133B
- MD5
  
  4f0017b3b346bd0626f0c3b915e6e734
- SHA1
  
  823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
- SHA256
  
  df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
- SHA512
  
  0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score

1^/10
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4