Overview

overview

10

Static

static

3

Bilibilizh....2.exe

windows7-x64

1

Bilibilizh....2.exe

windows10-2004-x64

1

Bilibilizh...pk.dll

windows7-x64

10

Bilibilizh...pk.dll

windows10-2004-x64

7

Bilibilizh...��.url

windows7-x64

1

Bilibilizh...��.url

windows10-2004-x64

1

Bilibilizh...��.url

windows7-x64

1

Bilibilizh...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    bb24a2d97d84f53cfa675019cf18b6ee_JaffaCakes118
  • Size 894KB
  • Sample240618-hfzfcsvhmq
  • SHA256 18e4a06236ace3be3e1aa2c43b548c4b0b4e783890681e4685e8d12330567b64
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
ramnitbankerspywarestealertrojanupxworm

Malware Config

Targets

    • Target
      Bilibilizhubozhushou/Bilibili主播助手2.6.2.exe
    • Size 915KB
    • SHA256 0b042645bddd096738f7f5608f86a9cc03c6f8eaa81dced121b3fbd9835e9f8d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1behavioral2
    • Target
      Bilibilizhubozhushou/lpk.dll
    • Size 136KB
    • SHA256 a901c3ba8fa3bdf95db6aa5b777dddedbdeaa253e95a1d52bfe461e0894128fb
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    ramnitbankerspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral3behavioral4
    • Target
      Bilibilizhubozhushou/更多软件下载.url
    • Size 204B
    • SHA256 357214eb50712a5c8663ef263c458cb4ebbbc27e64d73ab5e32c82f60a7b80c8
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral5behavioral6
    • Target
      Bilibilizhubozhushou/飘荡软件.url
    • Size 320B
    • SHA256 8dc8673d85feb2d358e80a498ca7e649b46b8af119ebaf32126099df3cc5fea3
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks