Overview

overview

7

Static

static

3

AgogoVideo2iPod.exe

windows7-x64

7

AgogoVideo2iPod.exe

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49bdbcc0510df6f53a5e1b9d4e3c35d6_JaffaCakes118

  • Size

    4.6MB

  • Sample

    240715-pfr5lssekf

  • MD5

    49bdbcc0510df6f53a5e1b9d4e3c35d6

  • SHA1

    f5bb43a44d7b78a0de503e553708ba2db48f65fe

  • SHA256

    c282afd656f68dafccdf65e3d08b43be8c6c42c601e7c0a544791ce08884fe21

  • SHA512

    295d3ab93919d1f4ff82851740ebc644ad93e6b6acf3b47d9c3505f8e4705f8ef7c9df4e254838bbb5eeb9dc594ff5a638f44ca26b7bea52a79beab2c95aa2aa

  • SSDEEP

    98304:rLWso+zrwjCR2NSwTeatPmgZzslKVdRJ9Zxz3e3sC8D:3WsoGwjCRjwfdZzoKVdfBkj8D

Score
7/10

Malware Config

Targets

    • Target

      AgogoVideo2iPod.exe

    • Size

      4.6MB

    • MD5

      a722b2cde169b98f68632f477e1627c7

    • SHA1

      0cb08ec4bd639f2912eba860b41bd08261993bd1

    • SHA256

      72eb409c2dedecfc8f2f9f5535ec7e11566614e7ba85bf9b42b90b537afa53bc

    • SHA512

      72638d94158305db9553dec0e4c392f907bcca952c068d32816465b88137d21660878cc0acdcb8bef67712919ee162cd28b8c3dca46bafe69e774f225deed62f

    • SSDEEP

      98304:55RQ0Gd5aJ3w2OKYZDSJAHqajj2ADSDBLWKXqKY9Yqh7JPFTmXdU:rinaJffumJoqaKQJ6q99/h75hmXdU

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks