Overview

overview

9

Static

static

3

PassRecove...ry.exe

windows7-x64

9

PassRecove...ry.exe

windows10-2004-x64

9

PassRecove...rv.exe

windows7-x64

1

PassRecove...rv.exe

windows10-2004-x64

1

PassRecove...up.exe

windows7-x64

PassRecove...up.exe

windows10-2004-x64

PassRecove...ny.exe

windows7-x64

1

PassRecove...ny.exe

windows10-2004-x64

1

DCglypass/...��.url

windows7-x64

1

DCglypass/...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    8c5c3fdcf3dce1555f32ce235f000c45_JaffaCakes118

  • Size

    160KB

  • MD5

    8c5c3fdcf3dce1555f32ce235f000c45

  • SHA1

    f0df019abd78bb9bea839f4c3360ed1c1c8a7617

  • SHA256

    0464c34a2ef0dfac22ca9f8847b3ae098039a18adffb251f44eb025b971117cc

  • SHA512

    b9f7b3c415a5cc80205f9088250d1dbc8d1ce9b4b8a654f32d53cdae5e20a2986ddfe2eae965be7ba2cc7f6f5ab543cf6dd45e27ce8581f63eeb1e9c84891171

  • SSDEEP

    3072:T37jJycglkIbLR5STWVZP6P3Lbry9XS45zncd6eMd/ywIdn7+bK1CZ5PtgSBS:b43lkJWVZa3Lb4bu+udnKb4CZ5FXBS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c5c3fdcf3dce1555f32ce235f000c45_JaffaCakes118
    .rar
  • DCglypass/DC管理员密码重置工具/dc_passrecovery.rar
    .rar
  • PassRecovery/PassRecovery.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • PassRecovery/instsrv.exe
    .exe windows:5 windows x86 arch:x86

    53d338fb5ceeb033459bc873d466d86d


    Headers

    Imports

    Sections

  • PassRecovery/readme.txt
  • PassRecovery/setup.EXE
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • PassRecovery/srvany.exe
    .exe windows:5 windows x86 arch:x86

    42cccb59fb52078015be74288575c424


    Headers

    Imports

    Sections

  • DCglypass/下载银行-提供免费绿色软件下载.url
    .url
  • DCglypass/下载银行.txt