General
-
Target
a5dfbfaf58887f68f0377025d4301699_JaffaCakes118
-
Size
2.1MB
-
Sample
240613-q5jefa1fnf
-
MD5
a5dfbfaf58887f68f0377025d4301699
-
SHA1
8d05cf2128270785422b07783248cb8aadf70c8d
-
SHA256
6d04f7bd621de1735292b2abd13dc5fa36690b9aa9abfbac432a3d6b4dd20779
-
SHA512
7b4c11af10e27f3702db1313ecd2cb050dacd8ab5e2b0c29c2a624fedb24b54e05cd60c4d2d024be50c6611bcd19e0748c69962587a47f7da3edf431856be633
-
SSDEEP
49152:TdJAs2PNXiBzLUXswMIfWvndqME6OFedl39kBDm2PxdOBYYVNE:T47NyBzLUcTIfWvndqLPSnkBDmkq7E
Static task
static1
Behavioral task
behavioral1
Sample
wpyxxgq/AweNauts+5Tr-LNG.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
wpyxxgq/AweNauts+5Tr-LNG.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
wpyxxgq/下载银行-提供免费绿色软件下载.url
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
wpyxxgq/下载银行-提供免费绿色软件下载.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
wpyxxgq/快乐天空 __ 独乐乐不如众乐乐.url
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
wpyxxgq/快乐天空 __ 独乐乐不如众乐乐.url
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
wpyxxgq/AweNauts+5Tr-LNG.exe
-
Size
2.1MB
-
MD5
da64c16e3d4fd88c344cf45a9d66a21c
-
SHA1
937741d4507b3c6f668c8fb89e40cc05273cdeac
-
SHA256
27b64798077fb3a91a625b681d5941b1d90a99abafdec7c53bff2a90d6183697
-
SHA512
b2f3f1544ac9137202e2a5ae0ac0ea5ba1098fb44c468cc84e4de65932e7f4c318d2671f5476bc6a55b92a0eeabf1d92baeac6d2b61764bc6760ecae9d3026f0
-
SSDEEP
49152:SoZFV307TwJkivFM8ofWvbVb+mIUwBvIfysNoRpeAmPCGkcUZ:SOf3ATwb+ncVb+mrwBBTWDPCGk9
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
-
Target
wpyxxgq/下载银行-提供免费绿色软件下载.url
-
Size
265B
-
MD5
8198b90729a29a180d83f169e44bf4b4
-
SHA1
808c7001a47365ed66f763540472f71c8ab8f3c0
-
SHA256
0472fb354a075029d538acbdd78064da47a19487e4efcaa513417232036ad656
-
SHA512
8191fc06f76f598a0f3022115f9904feabce5ed9e5642557a245e279aecd1e447bf359f17b5237fd52117438dd133a214e53886769f97ef3a5850d4e50bef502
Score1/10 -
-
-
Target
wpyxxgq/快乐天空 __ 独乐乐不如众乐乐.url
-
Size
338B
-
MD5
1a29e3b91db848bb2aca5609cc841c45
-
SHA1
adcbd343e49fe027421d677a05859d33c0fe5be2
-
SHA256
4753e3665b99095eb5ea87149e32eba0e0ba7c8d82317b00d7009a96725e207f
-
SHA512
3450e14b0773baeec3c31f70053dd9cf9723c703c0d93049fa0de418f22f7b67f1e19cca397530d6ecce8d0fe4969eeae575540fcc60015c493fcc1de2d64aa7
Score1/10 -