Overview

overview

7

Static

static

7

注册机1.3.exe

windows7-x64

7

注册机1.3.exe

windows10-2004-x64

7

注册机1.7.exe

windows7-x64

7

注册机1.7.exe

windows10-2004-x64

7

迅雷VIP�....3.exe

windows7-x64

1

迅雷VIP�....3.exe

windows10-2004-x64

1

飘荡软件.url

windows7-x64

1

飘荡软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    28259b80b5dfd68aac23044f25dcf902_JaffaCakes118
  • Size 1.8MB
  • Sample240509-d9tpragg3t
  • SHA256 8f83d2ebf1432f032bb308db5faa318d334e3c804b4670fca82fde807813f4aa
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target
      注册机1.3.exe
    • Size 908KB
    • SHA256 369b85d184da3dadfe166871d4260ce9c125f52322614d12119afc9fe3cf4ae2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2
    • Target
      注册机1.7.exe
    • Size 590KB
    • SHA256 be6dcf2932461acad2413415b54b10340f6db02973cccc2b18f0a2606756ccf2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral3behavioral4
    • Target
      迅雷VIP账号获取器V1.3.exe
    • Size 926KB
    • SHA256 38d61aeed652662b205998d104420f01e80e7c58a383d1caca253973ced53591
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral5behavioral6
    • Target
      飘荡软件.url
    • Size 328B
    • SHA256 3f6b8de5ca595a2e7371396fcb22b303e0f664733aabc940657c33324d5f269a
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks