Overview
overview
3Static
static
3PipeCmd.exe
windows7-x64
1PipeCmd.exe
windows10-2004-x64
1hscan.exe
windows7-x64
1hscan.exe
windows10-2004-x64
1hscangui.exe
windows7-x64
1hscangui.exe
windows10-2004-x64
1libmySQL.dll
windows7-x64
3libmySQL.dll
windows10-2004-x64
3oncrpc.dll
windows7-x64
1oncrpc.dll
windows10-2004-x64
1tools/NTCmd.exe
windows7-x64
1tools/NTCmd.exe
windows10-2004-x64
1tools/Sqlcmd.exe
windows7-x64
1tools/Sqlcmd.exe
windows10-2004-x64
1tools/cygwinb19.dll
windows7-x64
1tools/cygwinb19.dll
windows10-2004-x64
1tools/mysql.exe
windows7-x64
1tools/mysql.exe
windows10-2004-x64
1General
-
Target
32e8001b22842d3a47cd137b60c0091a_JaffaCakes118
-
Size
695KB
-
Sample
240710-cjq1hascjc
-
MD5
32e8001b22842d3a47cd137b60c0091a
-
SHA1
bc12ece424b87e88e9f7f8365649d55aa6c5df1d
-
SHA256
6fd01e7c046a0dbee635b69f5457a6d62405fd16faa30b708b8ecf41847867fd
-
SHA512
1b67d244face54acf04bcf607202157102df93a585d414426516d8b6f0d4873a2403a88b929c61a2854366f4803e8b73f00ab7fcd9d897cd714bfa6e3315abcc
-
SSDEEP
12288:yXHubF8ELfKnAKfs36k40/PpzWFeWifBDTqUlblsB42KJoT2FZeXYaztppp:yXAXLfKnuKs/RzWFeWeZTqc5sB42KJoR
Static task
static1
Behavioral task
behavioral1
Sample
PipeCmd.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
PipeCmd.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
hscan.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
hscan.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
hscangui.exe
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
hscangui.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
libmySQL.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
libmySQL.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
oncrpc.dll
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
oncrpc.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
tools/NTCmd.exe
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
tools/NTCmd.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
tools/Sqlcmd.exe
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
tools/Sqlcmd.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
tools/cygwinb19.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
tools/cygwinb19.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
tools/mysql.exe
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
tools/mysql.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
PipeCmd.exe
-
Size
40KB
-
MD5
970078b1a1d69f05bcd3944eb96a16b9
-
SHA1
64403ce63b28b544646a30da3be2f395788542d6
-
SHA256
cc1dda48929249b701305faea3619036cba29007a6db2a9aec6b8c05868ab1e6
-
SHA512
1eeb54f2b43140c659abe2f6b176e4aea0a0578cedfa21fa0c4011b6ab49eb129538a98adcabbbccc6f1004894a8135273dea15475240e688abbce1d75525c21
-
SSDEEP
384:jzc/9NSRix4fULMWru4xxkO3KnUF/02m44:jzc/bSm4uMW1xGoKnUx044
Score1/10 -
-
-
Target
hscan.exe
-
Size
128KB
-
MD5
6263b67a59dad81aecae69276d265e1f
-
SHA1
568b06696ea0270ee1a744a5ac16418c8dacde1c
-
SHA256
7418d747940adba7a9b93dd8e3a9c470194f8e442983f129dd9f19431c8963b9
-
SHA512
75d658a9cfc75e98b2c987ade0e19698a54d00e57c3618a54568341bef41192a9b2cbb53ee557035af89823cad8be60b0950eeb18fd6fe39b4f6a1fb7c7a44d1
-
SSDEEP
3072:vuwdE4JQCqrdrjL5eUIzePrykrSoZj7B:v1E4JQCqrdr4UMePryE7B
Score1/10 -
-
-
Target
hscangui.exe
-
Size
124KB
-
MD5
42be6717898901b0dc245800a219a3d1
-
SHA1
af8aced0a78e1181f4c307c78402481a589f8d07
-
SHA256
c9ec10f0be2bc81c2f3703b9b258a55f662d7fd78e4be0c3e24a6f2502978ddc
-
SHA512
4848f98f1a633cee19a38f83a11a35b5a18dfb9f0250413b1077c1dd38ab2305997a52b1d6eee78a862109f604fc1f24f2ff01badb3beabe11141bcf8e967ef8
-
SSDEEP
1536:MP4EawbCxws7yDKZvB+Dk1BTqgM35r9zN8PZlmuMJYqOgvP3/QXL:YKZ5+Dk13+qP/yl/HvQXL
Score1/10 -
-
-
Target
libmySQL.dll
-
Size
228KB
-
MD5
5c82aa0811d81b4caf189bc70f59d86d
-
SHA1
33552fda4d682ed39f9408e8bfb3c7fac9ee5659
-
SHA256
68dd7744114dd579cf5748d0a8e27ac9e7c83ef7fa7245786630ec69a286c090
-
SHA512
f23a7db670415e1bfd9b6d92ae65f427900696b4aa608ca236025f08f9f7e6ada397403fbb7b26796796edc55f351ea36a53eeb917e30aa80ab16e7fb6b242de
-
SSDEEP
6144:E2liPBy0LYtmcn7Ce5GfeAHC7Qea/6Dnegz:Flipy0L2mEj5GG3a/Qz
Score3/10 -
-
-
Target
oncrpc.dll
-
Size
68KB
-
MD5
be32939c3ad523129d84cf35a4f9641d
-
SHA1
e8f047eed8d4f6d2f5dbaffdd0e6e4a09c5298a2
-
SHA256
43ad6f6fc581dabc73f5da8ea691281bd0a28a413865dcb353772394a28f3445
-
SHA512
ed1ecb3d972a44dda3b720a7c4f56418908f83708fa926c39cc2998dd03da26d3c1303241d1288c748027a0db353a0670478093b4f04ce26c2f319e28c900fba
-
SSDEEP
1536:6QqKkdcFLkqJhmR56ONl24Xf2FCDEt1eGni:7jgq/hOL24XOFyI3i
Score1/10 -
-
-
Target
tools/NTCmd.exe
-
Size
36KB
-
MD5
4a9509c2d86a6b782df2837506015a3d
-
SHA1
a3ae8659b9a673aa346a60844208b371f7c05e3c
-
SHA256
f38cf1ce798e6a12ade9c196356d30ef5c8eadc99e34503644b53774dd9a0590
-
SHA512
9ead146bf5ae2d372e9d3f73d417f8ac8243c7cccc582c5448cdc77fd43879b728e9fd658769037dafd167f20340554127ea0b6e8f76f48efe6fa905ed1ac5a8
-
SSDEEP
384:JZKv/OOfkqTBUS04GcGzDml2HBLnoOMamtvFPm06pV1nOrvB6gkyDm73oieVux9c:J4nOOVBUWVfamtvFIdnOrsjyux9o7
Score1/10 -
-
-
Target
tools/Sqlcmd.exe
-
Size
32KB
-
MD5
bd368d2021f80055e62882768250df92
-
SHA1
99d56476e539750c599f76391d717c51c4955a33
-
SHA256
5ceae85b375e516adb38bcfcfe082b3aef76ad18712e2ee7e52acee35c17eb43
-
SHA512
c40795c456002747dffc774aa1f45a1e1922819d779a2b7595a1158dc56d9fe63658fe6c475a43d26adf79439ef161aa3afa6d13f1032f0f9d082ffb391091a1
-
SSDEEP
384:Fn7rbyjQT1cSUJhGEhYmlS5eRysypg9qffx3GkAoZo+n:Br2q1c3MEl2pg9qfp3GPo2+
Score1/10 -
-
-
Target
tools/cygwinb19.dll
-
Size
653KB
-
MD5
d388339d43a0e83c6effd1de09a91c30
-
SHA1
3988bddacf90569886a2505ec6eef8faf1c61df6
-
SHA256
61f3bd4efe4de44664eea151202542f058e2e247e28dcea4e5ac810a73d251f4
-
SHA512
83b61b44c20cabea1b7841d47a156e406f438023bbab4d35a9a90a1bff377da688e18841a39087c06182a2f0d428dd6b82783536ac99936d98f665fc1af3966c
-
SSDEEP
12288:ZBcweFLCwKDMpvVEiDTf5SUd9aw8s+r53fMyPMh39coCtE:D7twruiDTfT0w8s+93bPwcfy
Score1/10 -
-
-
Target
tools/mysql.exe
-
Size
326KB
-
MD5
ab9e515e0368d649741859a2dde0d7cf
-
SHA1
33e3f4bea31df01d67bdadf49b683670fdc04209
-
SHA256
87adca958b90b161bd0358386fab5834cd34f12af111f09b827fe99c1c48b969
-
SHA512
9537979bb28cb6449334759a0123e085d43c9e4b9c93b7276570d0e93bec2f463131ecc984a01acc7f483e629ba3958465f1d9fe53bca41658c0cca853c88cc0
-
SSDEEP
6144:36Cmsj/XggGwiNUwhVM2T0QNAVAUS37bMcdJaVm+jUlASBaKcCP63zA0iZdlv66B:36Cmsj/X8BNUwLM2T0QNAGUS37bMKJyW
Score1/10 -