Overview

overview

7

Static

static

3

picsaver.exe

windows7-x64

7

picsaver.exe

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3e3b353492ba9b00068e541540c35f84_JaffaCakes118

  • Size

    2.2MB

  • Sample

    240712-v1q1yashqp

  • MD5

    3e3b353492ba9b00068e541540c35f84

  • SHA1

    2ab0c97244f1c30a3b04c0918d72f8962c62d8c8

  • SHA256

    c14a4303d4711c5b440d14d62fa9d888cc8220613ed5924a3d5dec1e8a5638a5

  • SHA512

    4b7eaa5e00a37f703a6e74638ca1cf0a246c3b606d09968a217e1e61ccec450af7ab14e9bce80744be0f3791ef25c78561e64a3df663e7de51e4205fabf043f4

  • SSDEEP

    49152:Y615/UKRxFPNT4sEYClQGzXQ17oRA83YSuNECKKZKXSzdY+:Y6DBXFPNEsEYrm2URA83yEvKZKCzd5

Score
7/10

Malware Config

Targets

    • Target

      picsaver.exe

    • Size

      2.2MB

    • MD5

      1c3ce4c28636d90832de70fb9c102a20

    • SHA1

      4678dbd5489e52b8a3db7f8e2aa1d110a887fd74

    • SHA256

      154e4323ca12f95e78b0e024e4cb798cbcf83290ce2541900417bf35e69918a4

    • SHA512

      b4d8abf0bf66af90607ff628e0ea7fcb8e55f5f4032e0729a34a1f92ee48e5fcf7df20328286571100034c63d73ec8f8fa4142cc8ddf491da749753b6f870a3b

    • SSDEEP

      49152:6NSIld9NgD0hxC5PhE/tyYsbk7dsXa2xjVaomdk8N8pd285h:VIld9vhz/tNsARsXH9VaBq8YXh

    Score
    7/10

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks