Overview

overview

7

Static

static

3

kmail.exe

windows7-x64

7

kmail.exe

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    4015b7b3ce5308034b000c7a882cef04_JaffaCakes118

  • Size

    674KB

  • Sample

    240713-eeessaxanf

  • MD5

    4015b7b3ce5308034b000c7a882cef04

  • SHA1

    3925e74c7dcd35385da331512fb62482c8e7355a

  • SHA256

    6f068eee1b3275fe15c449b3ca805b3160dfd07ae436d8af0e6508ac2a4e137f

  • SHA512

    ee9e9c48abb38459418f1415fc99b5552c10ad69c4d158ea9abb840f8f40c303a1c8c0054a9f0bbf94d4134d050715b20ac043244366f55735440d08a927fa50

  • SSDEEP

    12288:HN662GPNjrxRTuUfnLzQT2z5Jg3jNz9YJZBKs5lhIxA92qgiRcNfBCiV:g/GVj/vnQT2NQ5z9zqTsAecMH

Score
7/10

Malware Config

Targets

    • Target

      kmail.exe

    • Size

      709KB

    • MD5

      a9a9250307ba71c95b883cfa0ded53cb

    • SHA1

      7c9d7919904b25a583d201e3aa1f88e2f2e740b7

    • SHA256

      80967e6c9eeb541750b895ce0550504ffce9e28638d5fb0f68861bfbf0048b05

    • SHA512

      c140ad050ce690bb3d4b6f8a81bd07a3cbdca1b2031ac9b300d0cd5973cb6355ca32820e6719c6a0dfe97b8a371af150120629ab1495cffdb8b57734b8f65fc6

    • SSDEEP

      12288:n2UtWfjtuvaxxPLcJg/RG7vYhm9shWlKOTwNpidNaR3yrjVgdLNvRdl5RSi52wt:n2UgAvax9LccRdm9vIDo3axyrjVgVdRX

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks