General
-
Target
fbb2effec82383d870e0ebdb184fbfc0_JaffaCakes118
-
Size
179KB
-
Sample
240420-cm2amsef91
-
MD5
fbb2effec82383d870e0ebdb184fbfc0
-
SHA1
ab92534d9ccda8c5b1584e48388a7151a9f9df48
-
SHA256
c406a6373b8131c69a570e39edfea632fc766c032bb415c6c3892b4f446dc321
-
SHA512
d0df2bc737a8b0c5ba4e5847b3df2cf2fc484c083b0a7b64c1fa9be22fec0fea8a32eda96cf54796d2d60e2da2a0171a9791f372c0ca18ae9182a954e36a54d6
-
SSDEEP
3072:Ge9hSJChdoyycQl0T97px4tDvxoRwZBmeVNNoUmMXFu8odAZ9bLxT+roR:GPCjoheTlpx6aRwZkmex4Q8DfbtaoR
Behavioral task
behavioral1
Sample
ddz.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ddz.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
ddz.exe
-
Size
198KB
-
MD5
07a18986b0b7e057c526ae78bbde921a
-
SHA1
fb08f03dd0807ba7ee2284a32c40dd056c43d51c
-
SHA256
bad097cc7df9f6fda993b8762ea93bb2b3bec21309018f6b2fe8d962da41cf1d
-
SHA512
d8bd8be79f41f5fd3992a6cc9a48f6284bd74d8d8d5f1a6be14229cafcd967b2c3cc4347965fc8ea4e22b602c9f09f126b6bdb26c374d39908ba302ebb5d0754
-
SSDEEP
6144:tPsuAC2VMJ9ZoSwGJxfwHoqhE2DjPlCSuoN1:tPs1VGZoSfx5ilCSuoN1
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
新云软件.url
-
Size
133B
-
MD5
4f0017b3b346bd0626f0c3b915e6e734
-
SHA1
823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
-
SHA256
df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
-
SHA512
0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score1/10 -