9c93cd60a6108167da782ab136db0779f684b4a6cfbf6e9ac570a66c31431ac2

Sharing

Copy URL

Twitter E-mail

General

Target

268450dbc357a2e6402acd5cbabc223b_JaffaCakes118
Size

13.4MB
Sample

240508-ywqq6adb5x
MD5

268450dbc357a2e6402acd5cbabc223b
SHA1

e144394edb7e874cd6c339c7c48899f7c31c4f4a
SHA256

9c93cd60a6108167da782ab136db0779f684b4a6cfbf6e9ac570a66c31431ac2
SHA512

59d268a1ef83af9e7426edf0ea90ff42db1bb59b163f694a2e39ba8354ea243c6a6dc68a66ae82991ef8bd5e046101719cd12f485d2e9593d315d9ea4658ed51
SSDEEP

393216:6y0Z1UZeIqx/vVrwV9m6nHPYusO9XJywNL8zVSs0okWmmiiCCdp:6PZ+ZeDxnaV0Mz9H8pdtCCdp

Score

9^/10

cryptone packer

Malware Config

Targets

- Target
  
  Haozhuodao_V3.4.17.417_Beta.exe
- Size
  
  13.6MB
- MD5
  
  0f6160718324775d1394ccfa4b5eff7a
- SHA1
  
  0c221fd655414edc934c9c29c48ca4ae4a45fa18
- SHA256
  
  60aedd194ccc5cc9493dc2584c05eca1f86ba1218a31d86c3708726f9092d090
- SHA512
  
  45f97108996874fa3dbfdf216769c4c216c2c5991532f523b3b6d0e55684a41ff0e808b68578a8c020a78470bc4851f43281ee052bbeaa4fd8d0a5c77d1b17fe
- SSDEEP
  
  196608:nQjYN4uypiR2Go4fmAvh0eIstP/2CtjSzLgNd9Vu/GTXgucG4YqBP2+9AazXv+gL:QjYGuKiAK9eezt/39VTwuy2+HVWO1V1
Score

7^/10
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $APPDATA/HZDP/HZDStat.exe
- Size
  
  57KB
- MD5
  
  35c6d4f3e82b90d4ee994e56db88e6a7
- SHA1
  
  c0973bfb842fa447febe566abf0d5095a143fc3e
- SHA256
  
  9117253faa8d3e3dc992c4fa792c2e20a7b2efd2bf83f9ef831e90dcc6854908
- SHA512
  
  b08d090e4351ff5fc335a4ab4e51fffff006f0114cc7463b76fe65c5bc37964bd6223ec5bff5a602a08dab0eac78f7d04f0202db2fb2c78860bbb802d68713ab
- SSDEEP
  
  1536:MqTHDfqKnxONtQUUUUUcUocboUUUUUUUUUUUrqMFUUUUUUUUUUUUYUoUU1xbPUU3:hTHD5ONiUUUUUcUocboUUUUUUUUUUUrw
Score

1^/10
behavioral3 behavioral4
- Target
  
  $APPDATA/HZDP/HZDunf.exe
- Size
  
  742KB
- MD5
  
  e2600b9c9732966b53137ae329ba49c3
- SHA1
  
  a04129490705077cde1d0ca12d542392251edda3
- SHA256
  
  8f670f94f53e2f62e4bb55d3abb09e2f616eb09311dc4bd7d5617f09e814a4f1
- SHA512
  
  a3ef95c0e262a7f27e80a5b824eaeaec01d226375aab193bade490170b5c7e042976e74d85386de3b4c058506731ae2deba19bd4ecb77653a69d1ff6c4fa8711
- SSDEEP
  
  12288:5OAKLcyUYonmmpDDoeBnD1N+n0t8i5QEg/LtmwPViz0M0sTYQ56+2rNEvE28QorV:5GffmJoUn8L0giISTYQE+2+vP8f4E
Score

1^/10
behavioral5 behavioral6
- Target
  
  $APPDATA/HZDP/sqlite3.dll
- Size
  
  359KB
- MD5
  
  26606cf164615149ceded6385a318a77
- SHA1
  
  e61939e7163f05753a0f60de08909e98ac575e73
- SHA256
  
  81692d85c3ae268bdc5c7a46812bf87db1e0a5cc2be3c96604bb028f357a3c8d
- SHA512
  
  33ce9c6318bd3a6ebb3e95798ca2949b8f88f4144fd1098f420ccb619ba5aac87f03c713adec1d10e9b47b93e76d3ae54acd1e88e32b3d09856da9b9bf44f620
- SSDEEP
  
  6144:YP/j9kxJr2uLy4voueB8Jef2atzCXiKpii8lTtBXI3SvU0rmrwjvDSn5/NKYQAl6:4b9kxI6vXQuXiKQi8lnY36LKVN/6
Score

3^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/BrandingURL.dll
- Size
  
  4KB
- MD5
  
  71c46b663baa92ad941388d082af97e7
- SHA1
  
  5a9fcce065366a526d75cc5ded9aade7cadd6421
- SHA256
  
  bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e
- SHA512
  
  5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce
Score

3^/10
behavioral10 behavioral9
- Target
  
  $PLUGINSDIR/GetVersion.dll
- Size
  
  5KB
- MD5
  
  2e2412281a205ed8d53aafb3ef770a2d
- SHA1
  
  3cae4138e8226866236cf34f8fb00dafb0954d97
- SHA256
  
  db09adb6e17b6a0b31823802431ff5209018ee8c77a193ac8077e42e5f15fb00
- SHA512
  
  6d57249b7e02e1dfed2e297ec35fb375ecf3abc893d68694f4fa5f2e82ec68c129af9cc5ce3dd4025147309c0832a2847b69334138f3d29c5572ff4e1b16f219
- SSDEEP
  
  96:E12kx1WhoMHF7ZmIpNkTif0geoBLERrqm1BdROBh6Hx2WsTDBi46AQuP:Xll7A6NkOMiBEReEBdRwiMTDBi46AQu
Score

3^/10
behavioral11 behavioral12
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  14KB
- MD5
  
  0dc0cc7a6d9db685bf05a7e5f3ea4781
- SHA1
  
  5d8b6268eeec9d8d904bc9d988a4b588b392213f
- SHA256
  
  8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
- SHA512
  
  814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0
- SSDEEP
  
  192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo
Score

3^/10
behavioral13 behavioral14
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  00a0194c20ee912257df53bfe258ee4a
- SHA1
  
  d7b4e319bc5119024690dc8230b9cc919b1b86b2
- SHA256
  
  dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
- SHA512
  
  3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10
behavioral15 behavioral16
- Target
  
  $PLUGINSDIR/md5dll.dll
- Size
  
  8KB
- MD5
  
  a7d710e78711d5ab90e4792763241754
- SHA1
  
  f31cecd926c5d497aba163a17b75975ec34beb13
- SHA256
  
  9b05dd603f13c196f3f21c43f48834208fed2294f7090fcd1334931014611fb2
- SHA512
  
  f0ca2d6f9a8aeac84ef8b051154a041adffc46e3e9aced142e9c7bf5f7272b047e1db421d38cb2d9182d7442bee3dd806618b019ec042a23ae0e71671d2943c0
- SSDEEP
  
  96:YV2qpbvYSflug0Dvxn6GuKM9sh1gdrN9+oB7FT9WibOoBZcko5N/:Yt5lugRK8hlvbwkKV
Score

3^/10
behavioral17 behavioral18
- Target
  
  $PLUGINSDIR/processwork.dll
- Size
  
  231KB
- MD5
  
  0a4fa7a9ba969a805eb0603c7cfe3378
- SHA1
  
  0f018a8d5b42c6ce8bf34b4a6422861c327af88c
- SHA256
  
  27329ea7002d9ce81c8e28e97a5c761922097b33cedeada4db30d2b9d505007c
- SHA512
  
  e13e29712457d5e6351bfd69cba6320795d8b2fd1a047923814f8699f7188ec730ec7f0d946fdff66c8b430fef011415ed045b6ea56e4cc0b1d010171ab88178
- SSDEEP
  
  3072:n/93Fm9hfGIGjk1qc55CDoGowH6Fb/CcXwuCoty1IKYOlIa+zUk9sfqQAPfujRzS:/94yj9c55CDorNqot43ndqQpzjIKW
Score

1^/10
behavioral19 behavioral20
- Target
  
  $TEMP/QQPhoneManagerWeb_710061.1028.exe
- Size
  
  185KB
- MD5
  
  dc031c68643c1f779840ac7305efc551
- SHA1
  
  c8fa96e544e096fb899c73429753ef8871588f93
- SHA256
  
  71b4f41a39d7f2ea3dd30a08c810a9c4d3a6d0c2914a7de3c093aecf914d8304
- SHA512
  
  3e3e1c7abb37bd49718a89619fc373a5704b93e6cec7c6b5b956c135d0fe678b20bed2ba3d93d088ebad3997f666d478eb7983c4218bac90e795eb6477a4731c
- SSDEEP
  
  3072:G9UgGOvSzDxz0UG5vcD1Afbgy0d8P7Ph+2up48e/KWzLDH:GkOvSzlzbG5EDygQD8iPDH
Score

1^/10
behavioral21 behavioral22
- Target
  
  $TEMP/SU_lk78_setup_lg0597.exe
- Size
  
  648KB
- MD5
  
  322911f9d1f42fc32fa4f454ce397fc5
- SHA1
  
  225c8eea86b79ab46bafc4bc6e77ee835dd05680
- SHA256
  
  85c11981201ed48bf93924b0c747bfde0a3a368fdb8cb938a02da667e653a0a7
- SHA512
  
  7c52c8384f13d8b273d1358a96469ff0102a11f60cfa8e79f300c380991eeb4a5e5be91eda3cf5f07ab95ad7366f5425469fe863a1b32fe8f3d689e1dad2bfc8
- SSDEEP
  
  12288:ulBPW49JlJW2uTkuIdP2mg/L0YTKIK00DYN/w5ib6mjc0Z:uvPWaJvpuTkthyL0YTtdlN/w5iemfZ
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral23 behavioral24
- Target
  
  $TEMP/setup_3126.exe
- Size
  
  56KB
- MD5
  
  0ffda624c26e3016ab3a301b95d03413
- SHA1
  
  3b69b6568724d95a72e1d620abec87baea37a738
- SHA256
  
  772447a79eba10b77b510cc08b6bc01b137a86430e0eefa80cc22ea48f064258
- SHA512
  
  d450d61b3f9c6637f862b85cef634fcbc750827846fb60bb67be0700207422f5fe61dd085561083748a1031b46bef145e5092f7d1b15687a3d97ac11c9179c49
- SSDEEP
  
  768:K9Maz1kop7Yy4hb+Yin2CEDvcjU9tOmv96vao6DYLvfJzSpL0GFK:KSu1koJgb+L92gYwuwvh7GI
Score

1^/10
behavioral25 behavioral26
- Target
  
  ContextBG.dll
- Size
  
  397KB
- MD5
  
  bd21095fe72f07e36d76c817496f113a
- SHA1
  
  438e389fb0ad76cc7df869c16d8c27f38d705ee1
- SHA256
  
  a0cecf910cc4a95fa608b1b68a3c65254edb8ade9cfe5fe8a3eb729581dddbca
- SHA512
  
  97ce444d4a35d794e9b774392c9c5f16b71e3c967113853d13672ec30b3e8dae7f8a13834e6821f2456cf3e27d10e7d27790f4d8fb24d293442ceaf7e690ebd9
- SSDEEP
  
  6144:gPZKVnhWWLHNSh1SteQ3zddxAwCA6I2XesqcXbBwytwR5GcpjS8L:awjxmMbAwCOAqEHtwPGcE8L
Score

1^/10
behavioral27 behavioral28
- Target
  
  HZDApp.exe
- Size
  
  165KB
- MD5
  
  1c3d5bd8851c993fc570da59bf5f67de
- SHA1
  
  2d8510dc21bf2715fef609844998d3937140f47f
- SHA256
  
  2f02ca86d235fcb07877ec46c95ab5a935ec44d7e8c1c9148f3305bef0919412
- SHA512
  
  45123039a1c7b282f041164d96278edaa3e0f4357e23fba7be0d7d65799e91b9dec8e6f2085e2876513496118d17b618555032982cc66c23f1e4d1b5d0bdf13c
- SSDEEP
  
  3072:E7g1RJZxKaXAklOVxALdh3P06p9YPfFYfXGn779dPNWGi1:E7YRjJlOwRh3P/XYP9YfXqX7Pa
Score

1^/10
behavioral29 behavioral30
- Target
  
  HZDHelper.exe
- Size
  
  875KB
- MD5
  
  4e91a30bf7a5a4626fc4bcf5e76046ab
- SHA1
  
  3410c5638fe87a1182558b682fa72553b1696dad
- SHA256
  
  ae8104ebe466f286f676d37d78da2e742ea833fa3fd83c68a478ec38ce61c2a5
- SHA512
  
  36032c991c4ac36117f6118f4d5421ca67723aaea870d74f76312a0ec86f94d089f435d5f66080a99a1a099d01d73af6f190079dbdd2d2915dd794675208712c
- SSDEEP
  
  24576:4mlA4EQ667LOEkrM+qdM3TGlaeShahMUVZuvQmo:4my4EQ6Vqu3TkwhahMU/uvQmo
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v13

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32