Overview

overview

7

Static

static

3

Patch.exe

windows7-x64

7

Patch.exe

windows10-2004-x64

7

etbackup_trial.exe

windows7-x64

7

etbackup_trial.exe

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2800872bd159fc3e7bf602c335ae54f4_JaffaCakes118

  • Size

    5.5MB

  • Sample

    240706-k4cydawcqc

  • MD5

    2800872bd159fc3e7bf602c335ae54f4

  • SHA1

    ebea3c599492b76fdd02780467e2169662fe42e9

  • SHA256

    63a8843d25ef29d312dac2e3b34b8640b2abcc60d8d0fcabdb1e88a94f754d6a

  • SHA512

    b70d871df3858b57f32bfae40f8677310d09e010391bd826d38e36c556d36af07735000f1db6c3eb2159fbe47b54c3e2ae85c8005db97c2606c56927cdbf9bd7

  • SSDEEP

    98304:fovPUdn5xlt4bLhu+sLUFhVMvXpFJ2mZBctgBFURl3CW2QY6IeTvi5UKJAOStbxG:fov8Dt4bLhu+sLU6vJvctDlt2kIYvwU0

Score
7/10

Malware Config

Targets

    • Target

      Patch.exe

    • Size

      37KB

    • MD5

      29382b00bb1c0a0043c4c0c9d8c7ded2

    • SHA1

      64db47180bd1dd9bf9dcf21f60cbde3501e37b01

    • SHA256

      307a31f07b9b35abb556452efc2dcd00932454c567505757e20f8598348617b2

    • SHA512

      8d503112acfc3ca914f57a0ea4de74679dedddd42590ba7e4d924bc829e425c93be7b4f7685cf59abdf7a97c776b34c97e91c1d7259e303b16e20330e617beac

    • SSDEEP

      768:LvWoj+WFxiYHV7bKAQqstCHkFHkNgoGyoezEQgvPXGl0Sf1F0:6oj+Cx7HxjQbtJENgRyoezEtXXSD0

    Score
    7/10

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      etbackup_trial.exe

    • Size

      5.5MB

    • MD5

      d7cf3e989525cf9531691f00fe258bb3

    • SHA1

      fc1ecf87d4b5b6fe8a73d7cad5ee928340eafeff

    • SHA256

      06eb105bfd3126056aa4152156e85b847caf01ceebdf07c3e6b7170527e0d229

    • SHA512

      610347994386faab6ec6aa1770aa6011d48dc87659cc7efb8958f852525a172d7e647c74a1b7e9cda5f3e60ce35de7b36c8d0fabf238a80bf1277e467f056a01

    • SSDEEP

      98304:iVevN+avQiZbZ2Jf7o+co3xxkpj/M+5DRq1qEaPhtQvXrDOt62+++pQEFr:XPYiZ8VkIxmj/LRqmtKrDbY+yU

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral3behavioral4

    • Target

      新云软件.url

    • Size

      261B

    • MD5

      af534adca72cbb40fcaba6adcf4aa0b3

    • SHA1

      486f64259c45baf815004b6ffc65301e82aecdee

    • SHA256

      1bbc2bfe53979f537c179995a1d1b5030db3ad6f2e46b258421506a3fb0fc296

    • SHA512

      21d4b21c0d228498275640b397e8adfcb92dca4996cb59b035eeea523c5fd0594b0c8bc66d557265343bf6e7cb35350790fcac323db841c0cd4fea6da38b70b1

    Score
    1/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v15

Tasks