Overview

overview

3

Static

static

3

taobao_qun...ew.dll

windows7-x64

1

taobao_qun...ew.dll

windows10-2004-x64

1

taobao_qun...EL.dll

windows7-x64

1

taobao_qun...EL.dll

windows10-2004-x64

1

taobao_qun...bj.dll

windows7-x64

1

taobao_qun...bj.dll

windows10-2004-x64

1

taobao_qun...PI.dll

windows7-x64

1

taobao_qun...PI.dll

windows10-2004-x64

1

taobao_qun...nv.dll

windows7-x64

1

taobao_qun...nv.dll

windows10-2004-x64

1

taobao_qun...xt.dll

windows7-x64

1

taobao_qun...xt.dll

windows10-2004-x64

1

taobao_qun...t2.dll

windows7-x64

1

taobao_qun...t2.dll

windows10-2004-x64

1

taobao_qun...t3.dll

windows7-x64

1

taobao_qun...t3.dll

windows10-2004-x64

1

taobao_qun...t5.dll

windows7-x64

1

taobao_qun...t5.dll

windows10-2004-x64

1

taobao_qun...et.dll

windows7-x64

1

taobao_qun...et.dll

windows10-2004-x64

1

taobao_qun...pi.dll

windows7-x64

1

taobao_qun...pi.dll

windows10-2004-x64

1

taobao_qun...ln.dll

windows7-x64

1

taobao_qun...ln.dll

windows10-2004-x64

1

taobao_qun...ln.dll

windows7-x64

1

taobao_qun...ln.dll

windows10-2004-x64

1

taobao_qun...70.pdf

windows7-x64

1

taobao_qun...70.pdf

windows10-2004-x64

1

taobao_qun...��.url

windows7-x64

1

taobao_qun...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ffaa59ed2d0babd9beed8effd2aca6e3_JaffaCakes118

  • Size

    2.1MB

  • Sample

    240421-tlg9tafb21

  • MD5

    ffaa59ed2d0babd9beed8effd2aca6e3

  • SHA1

    efe5fb09fef712b9183a7e00545b5f44f82aaad4

  • SHA256

    16e82bd509cf326cc7b3239459f80196bdde1fb15cad21e03e48189e4e73f857

  • SHA512

    ec4b18c9fd1d383bdac95a10014f9c530eed1557ca09458a0a1cd01abec0b6f828723ec6f8d2bfa87f10c3d62a83ad440a447eb3cf27fd4462bb2c91a01cb949

  • SSDEEP

    49152:E+wHalRjR8jtO4y8NgvwrgRo5WDQgXufMsr:E+wHa1GtO8uorBYDQ2Ar

Score
3/10
linkpdf

Malware Config

Targets

    • Target

      taobao_qunfa_5.70/HtmlView.fne

    • Size

      212KB

    • MD5

      4c9e8f81bf741a61915d0d4fc49d595e

    • SHA1

      d033008b3a0e5d3fc8876e0423ee5509ecb3897c

    • SHA256

      951d725f4a12cd4ff713ca147fa3be08a02367db6731283c3f1ba30445990129

    • SHA512

      cf2c6f8f471c8a5aad563bc257035515860689b73ce343599c7713de8bc8338a031a722f366e005bc1907d6fc97b68b8b415e8ff05b7324fb1040c5dc02315d7

    • SSDEEP

      3072:oQuAhdg7cWLmDYvGdVEJy7vsdbIzL66ou+jcmNrW65uxIoPNH3yjedlj:27ODYvmEc7PV7JE

    Score
    1/10
    behavioral1behavioral2

    • Target

      taobao_qunfa_5.70/SkinH_EL.dll

    • Size

      688KB

    • MD5

      bd42ef63fc0f79fdaaeca95d62a96bbb

    • SHA1

      97ca8ccb0e6f7ffeb05dc441b2427feb0b634033

    • SHA256

      573cf4e4dfa8fe51fc8b80b79cd626cb861260d26b6e4f627841e11b4dce2f48

    • SHA512

      431b5487003add16865538de428bf518046ee97ab6423d88f92cda4ff263f971c0cf3827049465b9288a219cc32698fd687939c7c648870dd7d8d6776735c93c

    • SSDEEP

      12288:AuOtG9rMIfLpoTp2/WFH8bW7INLtK4dRjKCHd:9z9OIu4d1KCHd

    Score
    1/10
    behavioral3behavioral4

    • Target

      taobao_qunfa_5.70/commobj.fne

    • Size

      92KB

    • MD5

      17ee210d342fb2bd8dcf38a5bb639583

    • SHA1

      81fdc8d3c3a8ff11ab9e395959e1f614177330c7

    • SHA256

      4a472cad276f162910b1293c3a661a0c88c9ddb50986342153f00506623e7443

    • SHA512

      833f0d1a9d9377e3eb0642062f34204eb1fa32cba54396e789fca5ad4bc4c0ff4de177a2a021a4cd4f8dc6d6a5e16c33e9d393c0f299f7489397aeefc8328831

    • SSDEEP

      1536:pq8xoOOTEKO2qIgw1hTSV6tTwb12Bkfoz1fUoov2jo:7xosbu+5NfKUoovgo

    Score
    1/10
    behavioral5behavioral6

    • Target

      taobao_qunfa_5.70/eAPI.fne

    • Size

      328KB

    • MD5

      cbd788f4c71b9776660d6e8473ae0e09

    • SHA1

      0189cd47bfa5d1cac0d7f1a33953d279f60b02bf

    • SHA256

      db0a6d7b75503daaf93c8e62ce67abd3afd57daaef4a448ec25a43d1de69e47e

    • SHA512

      84bc02c67e3a3a9f77418b25afe7ec55e5bb5ca5a6c05503d94dffa57a30c7608e79bb4f83fe91c39ccce16872df2b3f9e7e5a8eafb4f563b1f961b93e9b8c94

    • SSDEEP

      3072:RML/WXLcZnh1Sn8v2jNGQHTBJu0Lo2nVXQdtzb9trTSh05LNZPyJPo/AfVsIwQ+w:RZbcZh1Su2dHm0JnYpRuVBwQ+6etZZ

    Score
    1/10
    behavioral7behavioral8

    • Target

      taobao_qunfa_5.70/iconv.fne

    • Size

      912KB

    • MD5

      fd91dbcca49f02a8324e0fefd651ac57

    • SHA1

      209a45f9966da85bc93dfa613d80e00071223784

    • SHA256

      5921b2d83133f048bd34dd30bfcb2986bc8f08675a02defe8e43c3f978e76bd9

    • SHA512

      b3b8bdd71f384956d3523a313f2658c9a2e9e979133bc2a027323791c3d97f39d63a37308fa63503584304d4078dea442012285b1ae37df45276cb20f1a2b8ff

    • SSDEEP

      24576:lDBf2FfWl8KuqGavkg3NyNIbbbIoIBAUZLY:lB+s8KuqGaX0ToIBAUZLY

    Score
    1/10
    behavioral10behavioral9

    • Target

      taobao_qunfa_5.70/iext.fnr

    • Size

      216KB

    • MD5

      cba933625bfa502fc4a1d9f34e1e4473

    • SHA1

      5319194388c0e53321f99f1541b97af191999a09

    • SHA256

      25549c7781b3f1b92e73b0ea721d177207cce914a66f3229a71291f2eb160013

    • SHA512

      f5fb4b97c4f68a20e0847e6528740ce659c4501726f3b2dff1ac83e88a3b7198099da03edb0f069cd4af7ed568a2373597b235cd239895addfa5226d3a444142

    • SSDEEP

      3072:1dh+NmslaQ7iAvBvXo8M360VVQrtPdDMDyowHhRJl5pnR:iiGK8M36zVdRL

    Score
    1/10
    behavioral11behavioral12

    • Target

      taobao_qunfa_5.70/iext2.fne

    • Size

      460KB

    • MD5

      bd105196d705592175df247327550266

    • SHA1

      fd9792c08f42da3a9e6efd007734817e45a5870f

    • SHA256

      f11aa27688b9ad11aefe63c14447d1d4abbb4ca720a9f9006207ed650219387c

    • SHA512

      6e026abb57dfbc407b6a32534bc0c50c50a009232ec2dfb4a9ff385d90392ff85b57730dcd2a7cc25db75ab2771d34eb60e06d179b73967570e944871bbb076e

    • SSDEEP

      12288:4jduClb4j7r5vYB8s6SoJVqxz4FzhmnfWIlymAfm3ZuhP:4j/lb4j7r5vYBX6SoJVqxz4FzhmnfWIT

    Score
    1/10
    behavioral13behavioral14

    • Target

      taobao_qunfa_5.70/iext3.fne

    • Size

      380KB

    • MD5

      07f0db2727c8288cd2cf7c4cf352708d

    • SHA1

      caf2d1b631c785c1f6f01189cf841fc2661666ed

    • SHA256

      3c18183857979a2b5664d3f852f74e3f31f0626720654914453e964938e18f5e

    • SHA512

      b81029a2968663a180feca2e3e47f4736f87a7cc73e6a9153aa227b91d963e077f44c5a289b9f64d6b481b7bd5ccb4bcb762048a4f29810c1f4fd4e6106cb0d3

    • SSDEEP

      6144:Vo6VHgv+N/mcNwbv+QoF6QgTwZxLYROrHS8DYIcRQXZR:VLhQQ6bvacwZxLYRr8DY5QXZR

    Score
    1/10
    behavioral15behavioral16

    • Target

      taobao_qunfa_5.70/iext5.fne

    • Size

      308KB

    • MD5

      11f8542990ec449537dd87f7f49e6528

    • SHA1

      efd9c254da181a81d906aceb7faae1329a74145c

    • SHA256

      89719808d22fc10882ed463aec592dd6ff4da5a69a44e5ba2b06a7a2efc19135

    • SHA512

      569d9379e1acdf546040583919f614f762bde73d8c98bb98155801c107fea0b73d95c554da506de522b881914dabdd792999105d91fb55699e3adc9af7185639

    • SSDEEP

      6144:F6Vlj6c9MojKjv2iLoaGUJj6Z+v4Qk/2YFoGD:g/hKjA26oEdz

    Score
    1/10
    behavioral17behavioral18

    • Target

      taobao_qunfa_5.70/internet.fne

    • Size

      192KB

    • MD5

      0503d44bada9a0c7138b3f7d3ab90693

    • SHA1

      c4ea03151eeedd1c84beaa06e73faa9c1e9574fc

    • SHA256

      7c077b6806738e62a9c2e38cc2ffefefd362049e3780b06a862210f1350d003e

    • SHA512

      f14dfa273b514753312e1dfc873ac501d6aa7bbd17cd63d16f3bcb9caddcb5ea349c072e73448a2beb3b1010c674be9c8ad22257d8c7b65a3a05e77e69d3b7a8

    • SSDEEP

      3072:tkaaguNk1Th6jTFWBBMzlRjEg07N6QlMCyjrWzokcTaY9+S3UHQ:tOJOSIBBPg0xJMCyeYaLSi

    Score
    1/10
    behavioral19behavioral20

    • Target

      taobao_qunfa_5.70/isapi.fne

    • Size

      116KB

    • MD5

      1da9d2adac559af706650354128e4b9a

    • SHA1

      7c441e0cd3d658fd9e82dd15dbd1506a9ade7c7a

    • SHA256

      0986d450c863f0d73d3956e450e373db1504aabaa31c6455d9b45035e68174cc

    • SHA512

      bd44317879a2a653ae98a978cc1b338f4133ae5e02c2ecd1b29b99e8802c8b79dbefa2ff8517204ee827083e25de366aaa3a4a2c89897c8e7d4a828310e248c4

    • SSDEEP

      3072:v8+x8P5/EXaBOYsrsDTcYGMxomiOJIBRn:E+x8yXIsr4wnOJIPn

    Score
    1/10
    behavioral21behavioral22

    • Target

      taobao_qunfa_5.70/krnln.fne

    • Size

      1.1MB

    • MD5

      638e737b2293cf7b1f14c0b4fb1f3289

    • SHA1

      f8e2223348433b992a8c42c4a7a9fb4b5c1158bc

    • SHA256

      baad4798c3ab24dec8f0ac3cde48e2fee2e2dffa60d2b2497cd295cd6319fd5b

    • SHA512

      4d714a0980238c49af10376ff26ec9e6415e7057925b32ec1c24780c3671047ac5b5670e46c1c6cf9f160519be8f37e1e57f05c30c6c4bda3b275b143aa0bf12

    • SSDEEP

      12288:gRZTEr9vWWBjekIPNSohrqbTkjd67pStJgkyOPNMfvsnIPb1m:vJvWmeP5rqnkwpiJxyOPNMnrb1

    Score
    1/10
    behavioral23behavioral24

    • Target

      taobao_qunfa_5.70/krnln.fnr

    • Size

      1.1MB

    • MD5

      638e737b2293cf7b1f14c0b4fb1f3289

    • SHA1

      f8e2223348433b992a8c42c4a7a9fb4b5c1158bc

    • SHA256

      baad4798c3ab24dec8f0ac3cde48e2fee2e2dffa60d2b2497cd295cd6319fd5b

    • SHA512

      4d714a0980238c49af10376ff26ec9e6415e7057925b32ec1c24780c3671047ac5b5670e46c1c6cf9f160519be8f37e1e57f05c30c6c4bda3b275b143aa0bf12

    • SSDEEP

      12288:gRZTEr9vWWBjekIPNSohrqbTkjd67pStJgkyOPNMfvsnIPb1m:vJvWmeP5rqnkwpiJxyOPNMnrb1

    Score
    1/10
    behavioral25behavioral26

    • Target

      taobao_qunfa_5.70/tbqunfa_2008&5.70.pdf

    • Size

      501KB

    • MD5

      bc6834455afdc02f3bfab84b5a5515a0

    • SHA1

      078703cbf9d3d236dddd8b0003ea0bf441f7d7cb

    • SHA256

      fb9adc019feabb032d0472d3f8b9bbc7404cecabcdf8d1c0325b7c814cf5784a

    • SHA512

      19bfe6e598cb427ae739463e9818cd2ed4f68437760702cae96251cc984383c48f7d5501684c291843f163330b07fe085dcdcde48bca8061f45936cbc2dc0b41

    • SSDEEP

      6144:XciApQTs5QzrbYHmNT/xiqHpgS4CAr1zP30A1t6cotJvKVL9sK4yFFOkKpX7kLly:Xc7pQzrbLNwgpZ4CA9Jb6coiVKnX7br

    Score
    1/10
    behavioral27behavioral28

    • Target

      taobao_qunfa_5.70/新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10
    behavioral29behavioral30

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks