Overview

overview

7

Static

static

7

gfpwsfz/RCX277.exe

windows7-x64

7

gfpwsfz/RCX277.exe

windows10-2004-x64

7

gfpwsfz/SkinH_EL.dll

windows7-x64

7

gfpwsfz/SkinH_EL.dll

windows10-2004-x64

7

gfpwsfz/�...mp.exe

windows7-x64

7

gfpwsfz/�...mp.exe

windows10-2004-x64

7

gfpwsfz/�...��.url

windows7-x64

1

gfpwsfz/�...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    152c2f8fd38858bfef1d37aaf7622d09_JaffaCakes118

  • Size

    3.1MB

  • Sample

    240505-avytdagg21

  • MD5

    152c2f8fd38858bfef1d37aaf7622d09

  • SHA1

    e509b4aeb89e214fe8635d46f616cab5d950556c

  • SHA256

    3e61d159dbc00be0238a72db4bdc6e1682c22517b0f0341294b8b6246ccb0e2b

  • SHA512

    847dd6ed1afde93dd2de9e6e9608eeb54f95dbf5e4bfdcf9fd4e0f972208d09133e15689ef16c6aae7b4598b588ef24055cb3ce396156f75f681c6b0df130220

  • SSDEEP

    49152:+4ABx6dYGzrGBFLSL0iSGPs/cjY72m5fdF3RjSpdNjxl47DWGDoecBKOR346/unf:9dYCmSL3Ecsx5fdF3hcdWX7oesKkfu1

Score
7/10
upxvmprotect

Malware Config

Targets

    • Target

      gfpwsfz/RCX277.tmp

    • Size

      1.5MB

    • MD5

      91040fc5df161adb7c9fd70b31febc8d

    • SHA1

      10fa0372842ac39050792d7837051f590a91d0b1

    • SHA256

      361f87f245f8ed9680c35dd37c10691a6befe6b0e6dcc2c5db30e44522b306ee

    • SHA512

      0713a4a33f959ff68485955a1146250ee26c4c9035e626bbb1440bc1738681f0cb8dbdbb439579a025567ce8ed50925e1e71c1719d26574b4be944cef6f83c8a

    • SSDEEP

      24576:CJj2AWoTBQP7T0TZaqdiXSp0c02uFG6dAk3xMCEH7:CJFYP0TZaqdwk0c05HGik

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      gfpwsfz/SkinH_EL.dll

    • Size

      86KB

    • MD5

      147127382e001f495d1842ee7a9e7912

    • SHA1

      92d1ed56032183c75d4b57d7ce30b1c4ae11dc9b

    • SHA256

      edf679c02ea2e170e67ab20dfc18558e2bfb4ee5d59eceeaea4b1ad1a626c3cc

    • SHA512

      97f5ae90a1bbacfe39b9e0f2954c24f9896cc9dca9d14364c438862996f3bbc04a4aa515742fccb3679d222c1302f5bb40c7eaddd6b5859d2d6ef79490243a4d

    • SSDEEP

      1536:s5Np2dgZgIehUUS3E1Ujmrvl179D53UWnGQRJZiXRmrCnKptnouy8K:s5Np2dlUX0+Cx17F8QRJZKmOK3outK

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

    • Target

      gfpwsfz/功夫派无双辅助v1.5.vmp.exe

    • Size

      2.0MB

    • MD5

      09924e5384524fb6d547d0e3625c83be

    • SHA1

      8591cbcb6a78d3d34b0e43f26b230b32c644d0a3

    • SHA256

      992c43e5ce8d52fb7b00b2e4cd6f1ffea9e18c88c01592b99e2c628596171cf1

    • SHA512

      521c1ea49915c985459554fbb5d34227c6c88d9cef854595b1c4132546dcdd953f960fa4fbfe39f07cf99e4d5e6a47ab4ac0f09921b0b1b859112e0b9456328c

    • SSDEEP

      49152:txKS/6XdNesu2pqMnu2h6md3iA/ZekDZ+9RzjBz8R3XccuOrcO+j:txKSGdNesuLLEiABlDs9Pa3Xccufj

    Score
    7/10
    upxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral5behavioral6

    • Target

      gfpwsfz/更多软件下载.url

    • Size

      219B

    • MD5

      122e953f3a92541c27cc62db2d9bb0f7

    • SHA1

      5c85d98b4bce0daac9631297ddb00b005161d131

    • SHA256

      5bf9390d32df4da5ddb91425fc5002768a85305964a8e0cb8eda391b4b6511dd

    • SHA512

      77240964186d2e9c9c73ed6bf13edccaeb40c0d8cbf477080c9a40a76d044964330e97421e4b45818bfbb2688e6bfaf6720a52f2efdd3b944f3624b1b5767583

    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Matrix

Tasks