c62c939d862c85f1a3b8c9ed5383330ce591e4a7d7e8475dbbf6e6a4d80fbbe4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27760dea997b95b6bdf009e3a3d4a7fa_JaffaCakes118
Size

514KB
Sample

240706-gmhkraxenr
MD5

27760dea997b95b6bdf009e3a3d4a7fa
SHA1

a22580edca73c932d4136e2beb263d237985c544
SHA256

c62c939d862c85f1a3b8c9ed5383330ce591e4a7d7e8475dbbf6e6a4d80fbbe4
SHA512

82cdd37d789eb8df5125cd78e45f77ffe99134d172811d72ec3813143eccf1892d816fe83568ef7d1835841f241035cae8ca1f0cd64d6319a8664755527bc52d
SSDEEP

12288:xyEv6JTtslC0t6joOdodbCk/iKCP0QJWxQ+tFvtNMPf:cNj86jddodsKCsXakNMPf

Score

7^/10

upx vmprotect

Malware Config

Targets

- Target
  
  防ARP欺骗利器加强版/WinPcap 3.0 驱动.exe
- Size
  
  391KB
- MD5
  
  f29c54557ca7c76d10603a32f22fd0a2
- SHA1
  
  7545ebde1e19b9d0b00a6bc378c64087f7908e75
- SHA256
  
  8e29d0d86f85ff5e32b27f4136b522c568c851710bc749092408ccec939f39eb
- SHA512
  
  70efe419663be10011c19d665a99fda0591198ed85b9fa5af688609c523600d21acd0b2376add0a79e0914a43a56f816ff748c5c0e1fc5604c68f5a55d98c4dd
- SSDEEP
  
  6144:CayHQFOVevLJwedDxO3OQWf08cQIGPCuXUpPIweeZuoVGU5QBwZM6AmHEJ4w1Fur:CELJjxO3OxBtAunXokSQBhmHEuhre2Sg
Score

7^/10

upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  
  防ARP欺骗利器加强版/anti-ArpSpoof.exe
- Size
  
  144KB
- MD5
  
  c3278a1780b9f8224c699f6c5a2275c2
- SHA1
  
  08ace4f04c65abcdf0cf40ce1b371b23a817baf1
- SHA256
  
  3aa9f8e8f2917e347f552b36e9e14f9456364e3cfe9a945748cc985de810500c
- SHA512
  
  181c3ff8d12e2f611a52824a81e5bc301f360ff819a87eb13ac8ab2ae0e7a539fe704237129c58b0d5adf108cd06720f3c110e665ead05488a967343e88a8f13
- SSDEEP
  
  1536:NZTiAoNYpzSYLnfqICvVo+uMyw2aXUwLRmcr1+KfflWgZ5/c0V8CldReQE/RLRkB:NZmQUInFYotWXXRdht5UUfQQagtmwT
Score

7^/10

upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  
  防ARP欺骗利器加强版/新云软件.url
- Size
  
  133B
- MD5
  
  4f0017b3b346bd0626f0c3b915e6e734
- SHA1
  
  823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
- SHA256
  
  df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
- SHA512
  
  0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score

1^/10
behavioral5 behavioral6

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6