Overview

overview

7

Static

static

7

QQgzzBsq/�...cn.url

windows7-x64

1

QQgzzBsq/�...cn.url

windows10-2004-x64

1

QQgzzBsq/�...��.url

windows7-x64

1

QQgzzBsq/�...��.url

windows10-2004-x64

1

QQgzzBsq/�...��.exe

windows7-x64

7

QQgzzBsq/�...��.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    157b62260f840f45cdded71649a80789_JaffaCakes118

  • Size

    2.7MB

  • Sample

    240505-cgl9jabb5w

  • MD5

    157b62260f840f45cdded71649a80789

  • SHA1

    493bc624457635fe2c2ced5296e7e6811f3302c7

  • SHA256

    ad5b92aebc38dd5324fc3c67ff8e5f3c031922f005ed0356514178c30100e43d

  • SHA512

    2536332cf9ab00cec88b2361a676a693a6e69a6f9fda87b59aac56cf9d2fc5f74554d1b05f81dac50df14d0fc4ebdb6cf23ad42fb848f3665d41f4cc9735ca69

  • SSDEEP

    49152:IvpkYY2rZ/nHx7rtk+yWLHJLjFVIzS/9uFWwBKStMumMzeRCwvyuIZH2OSXdIELl:IvpxR1rNNVIYuFLfSnbwcdICrF

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      QQgzzBsq/河源下载站-cngr.cn.url

    • Size

      110B

    • MD5

      87d5540eb47b60f225cc6d5e9ec5d3b5

    • SHA1

      bb87c8cd2721eed95ed96cfed3c23a71dd636743

    • SHA256

      7503e8e9530726e8934149fb2afc1a9638d8a4727cc05c6bed1c1b1539dc43fa

    • SHA512

      ed81acc65c042f99ed20b511a755606e13619ddbd7e05125ecbcf5342ac9239329184d8b1b45d47ee4fc0ef4c62e06b2bd806b73f0f5c852173798e76d23a951

    Score
    1/10
    behavioral1behavioral2

    • Target

      QQgzzBsq/淘宝热卖.url

    • Size

      384B

    • MD5

      959444600790e569e917523917654610

    • SHA1

      bf62acd4e2059dcdf7dbe9b1c343a436212ff784

    • SHA256

      3f5d98f266fa246282bbda9fbe2872e1a6c28452a14bb3b2fa80b8498ceb9f93

    • SHA512

      982c307aaa05bac10e079e4bc59aec4adc64f5c48a70dd67d57379e7e4e36af63e77450d55a1c895dc9dc26601cc1e9f11353378d2151f6486f480cdf6f0a9b7

    Score
    1/10
    behavioral3behavioral4

    • Target

      QQgzzBsq/装逼神器1.3版本.exe

    • Size

      2.7MB

    • MD5

      fa338c46e3f7299bfc7903c58f624e0b

    • SHA1

      228a04c8f415c65bb56a0e9ae6e410a35df62c4b

    • SHA256

      dc1e162dca9f6b70a6bb26575343d80a90b0a9c2ebb013f34208555a1eb22a2c

    • SHA512

      f327bad992cb104894e34fcd8223a59bec534c99d22a978ab2115ac7cb4049e14f68fbdd89b9bced58442c9f60306680636c25db17de770f3d8f69c768a41e05

    • SSDEEP

      49152:/WXbaQRU2PbfR2WW2jaPrMp9Nw5WMh9gE+hZL+5XfHoE1Bkr1UVyGncTkV33JQ3f:0dRU27R2WW2jqrMpzw5WMh9gE+/sXfH4

    Score
    7/10
    persistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks