bfb643578f4a4d62f06c6b959c5b50a63212fbd035c8864267d757d33575738c

General

Target
925bd70cc54aa814997e12f4318d93f8_JaffaCakes118
Size 19.1MB
Sample240603-te38psbf4t
SHA256 bfb643578f4a4d62f06c6b959c5b50a63212fbd035c8864267d757d33575738c
MD5 925bd70cc54aa814997e12f4318d93f8
SHA1 92661f3e5981599200b0a4f0f2d816c14720620a
SHA512 bbd00b8f416748337de10e762faaa88451f841c9658fa6cad41c916f74fe318ed2975890bddbb4f40401a8949425af3f8dd1c0c3967874c07555bb9fc3b93448
SSDEEP 393216:pjcMzChSpX6cLBSoKCEoumJhLDZFwGedu3h+kngm9mTE:pjcGaYqctPKCbumJRfgduR+kYTE
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

vmprotect

Malware Config

Targets

- Target
  mlsq.exe
- Size 19.2MB
- SHA256 3a4ed2cd488f98a1af2d84113937996f497ad08b04c2990214d1f1d9337cce5e
- MD5 159fc5a025a9e7f6193a5f6894b9f1c2
- SHA1 258f5917adb54a9139123d7ca05f0450b1a3ec18
- SHA512 7dba8bdea7075bbe4d2d589cf8b59f279dd3b7decf55eebbe1cc590b0a6f37cc49974e619308f4ef4ef24026690295df77b2ce350529b20b0ecd86727506cd34
- SSDEEP 393216:9liM/Q9BJJkwQ7Q8XGImW99kW5VKScdswcKUGrlVUBBsgEjh80lXOFEenrE7RHKX:9cKAGw2GIh1K9swjBrwvsgEjK0lXNUqS
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

vmprotect
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
behavioral1 behavioral2
- Target
  更多软件下载.url
- Size 204B
- SHA256 357214eb50712a5c8663ef263c458cb4ebbbc27e64d73ab5e32c82f60a7b80c8
- MD5 94e540428ac8f3545fec78c2b3dd8c0e
- SHA1 cd46c366b68af03fc8fa4fa097f9815d43e4c2e8
- SHA512 3c7876c3a18e1ba98329392ac1b940c479552b361386ce3776622ae557e4d3d8cee045d162a614a302a603cb4615024258703e0652f41541e043fcf7ecdff539
- MD5 SHA1 SHA512
Score

1^/10
behavioral3 behavioral4
- Target
  破解.exe
- Size 764KB
- SHA256 56d49bdc1a8cdebf86bd23b9a7d1afe76bd7c978a207c0b22d13638cfa645bab
- MD5 da590f8f16f6af887aeb4248223ed5d8
- SHA1 cacb2c6ace2df3900c7e086bd9dbe47e2a873c0c
- SHA512 3eadfdc5b1fac51c93a655238865fcb1e88f3b8f395824df522ab48488dd964bf9d1a323b16632042f409654e85433e859e0462e700f39f8c2ed5ee5875b0f27
- SSDEEP 12288:T8hztQlRJ0P3Fn3smzysab0yIoDgcpmNJ:TWtF3N3JzysaHIygN
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  飘荡软件.url
- Size 328B
- SHA256 3f6b8de5ca595a2e7371396fcb22b303e0f664733aabc940657c33324d5f269a
- MD5 e97aad722245bfc4a60be0e6f453be6f
- SHA1 c7b7c9585109f71526ed65616668ef7573841d9a
- SHA512 f151b723079fc09ac4b44c540b278b8c273f3958d5b661a6b30e31b119dca6d017ab0f987c52c60cc46e917ef9626e943971017d8e1dfe11c4cf27b93a2c772a
- MD5 SHA1 SHA512
Score

1^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

VMProtect packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8