General

  • Target

    003af85838e27efbcbe732745725cdc1_JaffaCakes118

  • Size

    8.8MB

  • Sample

    240426-hqcpcabc46

  • MD5

    003af85838e27efbcbe732745725cdc1

  • SHA1

    eaf7e0e05827a02590c4b8a7d92eb6f36f4ee729

  • SHA256

    f065944d41079c9c868426b408f39ae6525914929f150d3a2e2b19d94efe1322

  • SHA512

    9dfe31e9ecefdccbe2c44b9a8610943def04ee80e34162f01cf1c97a62aa2e349778861750a7aa1aa30c95908d4e1ef2a1e650f2ccf3462734f669b190af98d8

  • SSDEEP

    196608:agZ9pJfCTOFYCwCbQobdaQXEYTQtSTiEFrDoqleMuRCRGglbkyT:agZ9psdC1brbHPEtyi4r0qlerOGFyT

Score
7/10

Malware Config

Targets

    • Target

      9553下载站.url

    • Size

      123B

    • MD5

      641b7bd2fb28a200dc63636c8a42e01e

    • SHA1

      983ce619412387b4fd1eea0b0aea10c76da823a0

    • SHA256

      84b4b4fb5d876f65f02375bf947a3f29fa230b2f3e456c672029453c35f7bf9d

    • SHA512

      2cbb10b153f9c33b0e0965ef5e4208a91f29254c22a1599c33359056b1c0318dabf05c88d2ff79360ec589a6e23f73864321c0b05ea67fb5228c800205ed9757

    Score
    1/10
    • Target

      游戏攻略教程 - 9553资讯.url

    • Size

      122B

    • MD5

      6c97c03731681ea365b4ff506b11f1e5

    • SHA1

      9dcebc174df51e21cbf7d21177b22b14092a42b4

    • SHA256

      3b8c8cd12f2fc581a777310d893116c7a89cfff9037ea79d0d5ba67161d44ae6

    • SHA512

      6b61a12f9eab3e54c1496a29d1f23a3687df7111f20393a6e4632c4c8cb169dc53c8f458abb5ef4c97bad394c73862ab9861f8ee3cfc8c683c8eb8141eaac86c

    Score
    1/10
    • Target

      破解版熊猫26A/拉布拉多论坛-网络验证通杀器.exe

    • Size

      1.1MB

    • MD5

      8dc8a5066c56119a19aca711cd2ae6d9

    • SHA1

      13e251661c52d61725b5c6c3b48a29c05dfa8772

    • SHA256

      6ecb1e618745b32272a67b31e09692c8d9cf14090e3b51172f81e1594d5a4bda

    • SHA512

      91777377b49109a6335eec0956668876a11d08f1f669d6b27b6e05e75b149b897fcc2f5d6c176e9299f2dac31ab485e3efa9d5e62cb31a3ed7fe387604d7584e

    • SSDEEP

      24576:0hhqzwOqujhGcJ5LoFKh20pNutB4pVGeiGhlM94dXQ:0hczdqujkHFmQP4LLhHdg

    Score
    1/10
    • Target

      破解版熊猫26A/熊猫透视自瞄26日A.exe

    • Size

      9.6MB

    • MD5

      1752e50b50110d718919153378beedc5

    • SHA1

      23d380e44b5881062eeed00bf8b611e01c373f56

    • SHA256

      51325b51a7a37300a09e4bbccedf280ae8e2d4668e4e8d9fcb1d46b4d973016b

    • SHA512

      6558b9342dce23efd3f10e741839f076b098b7096eb14ea92b5a6384658ad5627e3a57e8866e8eb3e876d7b24d4fee1b844cf2567c637759005d3a244aa4e3de

    • SSDEEP

      196608:MDPz1O7Nnuh/IxZ+yIzwXDmvjBltqmBtDLS:MHM7N6IZ+2KvjBlMsDO

    Score
    7/10
    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks