General

  • Target

    b3eaf96b103223387581697283c5cc95_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240616-rhapfswdnc

  • MD5

    b3eaf96b103223387581697283c5cc95

  • SHA1

    338c049101d51230e4da7e2791fce66eef415456

  • SHA256

    9d37d5e8fe86544f12474349d105476fa702cb62b2b9623998aef68f542186a7

  • SHA512

    9c2f34260eeea3f138d35ed470e7a443d4e6baecc557ad1a97bfd5fd97f7c23974e54a80aaeac6490d7a36a49f14ec148a9bbc1e95cfff54d6edef4de9f2ec4d

  • SSDEEP

    49152:DE478qsK8CSIFZIVXIFdilgbo7JjFxCOLpwtYIVDRRIUb5062:tTs0SCmV4ggbWKOCtFlIUb5e

Score
6/10

Malware Config

Targets

    • Target

      Gamersky_SleepD.20Tr-LNG_v2.0.434913/SleepD+20Tr-LNG.exe

    • Size

      2.0MB

    • MD5

      ca869589d3fde6f4edee926257c34111

    • SHA1

      b5ff091d66ea283498350c648b404e43cd52b65f

    • SHA256

      2d30f73533c11972bc73ca616671194ebc61b673e3f352d9f05e7b1e207919c0

    • SHA512

      50303c045651fdc5262a46c848dd1bfa1ebf70459445fd75818530cfc2de0338471c79cf7aee4fa7bf96bf09f83e361b0729aeb7265999b38a01f8498a1eb07a

    • SSDEEP

      49152:ZRNg2dVl9GVOk2MyIq/8lzyuRHOimpXmOW12+Ylw3i:ZRNgQl+OkVFwsRu/pXsPY1

    Score
    6/10
    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target

      Gamersky_SleepD.20Tr-LNG_v2.0.434913/游民星空 Gamersky.com.url

    • Size

      265B

    • MD5

      1e2afd10cc59022d1a1e5e5955785cda

    • SHA1

      84ea7f39095f37ff5445339a35e6327db4482425

    • SHA256

      b5054e502905b23515956517ea3229e47fe4e1d7e66e0c59f06f927a6bdb25d8

    • SHA512

      add05dfcf5e4d044e749611d1bba138eb11ecf42b6a37636efc9c2f5f8f3def71437d497e4e90c873dc81412385b742f097d69a045505e822db4ade75cc30e84

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks