General

  • Target

    66999aca2b46caacf08683516cf94eb9_JaffaCakes118

  • Size

    3.5MB

  • Sample

    240723-hxxm4atcle

  • MD5

    66999aca2b46caacf08683516cf94eb9

  • SHA1

    d163fa460904ab2792ff1dd7c8cc5e61badd9902

  • SHA256

    29e7cdc8660c96b05630f5a66fbbc9e9aca7fbf4f5cb1517a954e3dfd252511d

  • SHA512

    bbc99813fb2febf5f1aee878a1502c4482d9a90f14e3a67ed775a586fd1055600cf6b7e04fd3633e23319c87c6cdbd2221aa9e98927b4959861c04993057e8e1

  • SSDEEP

    98304:shtB5PBlahjUdC31UThpj42EiSy0toC1I+P4KuZWbn:qT6hjUZhdiim3h8Zw

Score
3/10

Malware Config

Targets

    • Target

      零时空/agents.dll

    • Size

      158KB

    • MD5

      4cafbcf04c1d8eaff9de0ff07b5d6c80

    • SHA1

      9eeaa9a313d009bf062675fcf21f84fb45591d92

    • SHA256

      bb3f1a560ede14c629f5dbe03120ee9dbdf7edf84fa2f8afa70de3a17179c3d0

    • SHA512

      4d3970df39ed57f98699a4427ed3cfcc68ad1e4b3164343fc50a0b6cea9af05157d855a6a7a32e69338f4051fa52132f5c8e1ec88fb64a822fdef27bd91342aa

    • SSDEEP

      3072:iJuqTmxWaKmV3voIAFZUtreSsh6wPhxoOt/:iJo5nAFOtreDh6wPcOt/

    Score
    3/10
    • Target

      零时空/atl90.dll

    • Size

      155KB

    • MD5

      78b62e4c13378f737603136975a07e1a

    • SHA1

      fe49df71b950a304512a3633f7e3db9380664855

    • SHA256

      7cc6c299a20b2de62b3844417f085fce7fea32cc006a10658b3e4815b536329f

    • SHA512

      dc315bf8cfc93a9001e023dc65ac4d9c882ea2da0d8bc4a2fb8dc4783c502c7ec8b0ed0d917a6b9ed398c2f63ca6713cdb266c25950e4c2742f02b01b7582b62

    • SSDEEP

      3072:IHJXmwplbA995vqNRoom9OSfJ0osAZT/NX+cZSyh53Knj3K0Z/f:IpXmwXA99hsaN9JJ0osARB+cEymRf

    Score
    1/10
    • Target

      零时空/audio.dll

    • Size

      156KB

    • MD5

      44632180b0a749289a1ead32c7b1bc4c

    • SHA1

      d27da54ba71a4fd0ab499c71264548820a1e02f0

    • SHA256

      41c4a3d18af5c63352ac51387769ff19ee5fd4c272f32587bc49a3d5df16bfb9

    • SHA512

      d2d8311b27ff3551f024f3e2d52c59ca97d5fc1be39e10f246ba08fa03249e64cc2a4378833b329e92e3215f63bfdb74fec58330bc89f12d58da65854d40d46f

    • SSDEEP

      3072:KhBwSYoh8lJGPy6Gj8Op7kC44M1r3in+1OKhPFuDa9Zdx9:Kh+SYoalJFj8Op7kC983in+1OKh9u2lf

    Score
    3/10
    • Target

      零时空/cl32.dll

    • Size

      889KB

    • MD5

      d487152d86d0ab5c8ef294ca737afce6

    • SHA1

      b76572e6b083c2c3f48b5924a1db77704845a91f

    • SHA256

      d240c6514f2777aee7a0767412b350e5616476f2edd5c27352500e1f172b010a

    • SHA512

      adcf8dd79cd9204108182ec45999a22cfebec2d33106eafedef8333e8ea53ae4f9544f592479f7c6e280d14d20ba460217867c972694fd64442405a12673ffcc

    • SSDEEP

      24576:w7zxqgV7iurHp/HG52xulNEJnN01NIybLO2k:gVqvsHp/HGjlCR

    Score
    1/10
    • Target

      零时空/cmdk.conf

    • Size

      3KB

    • MD5

      dce3f47d91a7bd989963a166c62e3b30

    • SHA1

      0c5fca7e1ea29b592c8c3121f3a8122a4bfde191

    • SHA256

      dcbd167dd8ce900c408c5891de037da50175a7c24af63f88f68cbb8d858d30da

    • SHA512

      f1ffdaf2d0e3933e9cd6a8e0ce90a2d7f59ced76636d9769fa2fd5a5e1a17c50aba6d0aa3e748a244c538e106cb4f90b5532c7eeab974b7b3deaa1285ef1f875

    Score
    1/10
    • Target

      零时空/core.dll

    • Size

      466KB

    • MD5

      fc0d8d58ea9eee54e3605300e86e3e35

    • SHA1

      96266c641392c49986e74e509d00cee73e136f81

    • SHA256

      4fabb5970611b4d2e94d1176dd4b3e26a648aba58c82dfd6f3f4a073a3ad0ca6

    • SHA512

      062c5bfb24fbf9c1435fd41c790c6835a77a706759bfc627499501d4428060d4bfb7be0cba3c47cf0adfb8d4204128ab3bb67aeaddc988d3633c2c952b41bbe4

    • SSDEEP

      12288:6qLYriELFTsXZBfeg82IixbU+5oE6H14V:KtLWBZdU++E6H14V

    Score
    3/10
    • Target

      零时空/drvmgrcore.dll

    • Size

      384KB

    • MD5

      8ab60f4189a01e469e7da2d503c989bb

    • SHA1

      6a23cf5f7f502ea37f89b39d5beba3f0d388bae7

    • SHA256

      42e6884dfdfd31bdb6c3cff2852506bb7276be4c0211c1a736b8716b2c193d3c

    • SHA512

      de1315622baed72d8e46e6aaf50d7241d9164ed673233301714d8ddbdfbf67b1047beb143563ce2c954665d40e87140cf014bc1a7df331e9db5a4ddc338b1229

    • SSDEEP

      6144:7FrPwS8L04qfbuNJzBb247IpEm7S0McjhnNTBJdcWh/Y3OtQk:58SQqfbuvBC4cm0McjhnNTvdceQK

    Score
    1/10
    • Target

      零时空/drvmgrui.dll

    • Size

      456KB

    • MD5

      f30fa64724944701c401ea240e8b7377

    • SHA1

      5cfcd999706d4d0237fce0f12190d2da4d114f1c

    • SHA256

      86167cdb6b968d107b966c434e8e8221808e11cd9cd78fd03b62c5361b6a3af6

    • SHA512

      0b33572237fa47c2e2635263b7978d1f2f236e5b6776392f2c026829951b1edf5498845bd7aa8d5a975eed030700ef1efbd8c3ab4d97ad0f06389df2d6aff069

    • SSDEEP

      12288:UhvPkSPISxF/BWG2gxZUqfn/TMgRKpmYSWL:5SASxF/b2gh/TRR+mYbL

    Score
    1/10
    • Target

      零时空/fileclient.dll

    • Size

      84KB

    • MD5

      95a92b09f27551bf85fb5f547c6ab393

    • SHA1

      f1a59e1f48f5ad01b6b2a965c8a4235bd179b56e

    • SHA256

      57d7eae3f44cac49d2d29fb309050450976327016c21804e6fc44b35393479d9

    • SHA512

      2d2e6ed177090131190840919b6d300e63080185a3657efa402c3c107a6a2c40e6e077f6b2632022075ee9bd57c559c60eb970f726698f3f23d2c343cd3dddea

    • SSDEEP

      1536:+/D3gJly9476RznMH6YOPsDqEuRlLele1zaoP/1hVn/PncXOtONFsI:+/D3gR7p6YOPrEuRlLele1P3vVn/PnsD

    Score
    3/10
    • Target

      零时空/fltk.dll

    • Size

      778KB

    • MD5

      1900f39e7a4775ac1fe75e8f7a0dd874

    • SHA1

      56c88aa5746d4e773f0ae79aa8aabe1c135f73d5

    • SHA256

      0c93de102afaa1dc08e2d773e8eeeb4252a23801fdd094afc3fa48dfffff0da8

    • SHA512

      a26f10b8d1f13c82a05de36049d3309541444e26c0f2715e1cd4e5ac8dc75204818f713e59778091b37742b7a9ba4eb298db10df2bc9454aebf4a8320e5138bd

    • SSDEEP

      12288:STB8GOYBoSDqQbPvRLk8/tGUSTwGEi6pmun4MQyhfL34sxfK2DSGhNFqefyMRBja:2B8NNORI8uwGzunMsxiVuF3aWa

    Score
    3/10
    • Target

      零时空/hotfixcore.dll

    • Size

      90KB

    • MD5

      eaa151e928f8b2326f3e4ec8e9f46e89

    • SHA1

      35cf071ac5ee75decdac4779dd8d471e1d15bcc5

    • SHA256

      796c2fc32939b16e4f0c2fc91fa9dc892c65a5d3f659603542a4c5f2fb9cccbe

    • SHA512

      bcc531e90f5748647040be2492640a958ddd0ec12782b4c183fb902c94c262115bff459cc943304f438bc79bef64da456e18bcacd8d7dbb7e82628da5b2693ac

    • SSDEEP

      1536:zlniAhUGaJxXF9RnXEWFQZ5VmfWyr1b2nZrxjJD4gVtFJFBSi6XO7pyOtpjNU:zpCGarrVXEW2ifWyr1MZrXD4gVtFJF43

    Score
    1/10
    • Target

      零时空/hotfixui.dll

    • Size

      415KB

    • MD5

      ada9053ca6b702baaeb0ad417dda01c0

    • SHA1

      34aa4c2825f814d9efbac8a4344e4d2618bf17bb

    • SHA256

      700c408881f08f1c6bf04873d6db50f76d016a29083b3e0bc3e399a93325dfc7

    • SHA512

      c528c0356525c41aeee02eba642800bb5749b2bc9f345b82887e0f8c14917216184102b43c6116cc8bbca34837930a247092c4ff662134c0e372d16048ac252f

    • SSDEEP

      6144:2Rr5G41Ls7/LuG+StDE4scFYK+3/FEs8OzHNkTBf83Ivj/35wuOtVh:2l5v1Lu/LjtA5cFEEs8OztkT583IFw

    Score
    1/10
    • Target

      零时空/librmdts.dll

    • Size

      390KB

    • MD5

      dd9f528a07726de80a0a6b231c410f9f

    • SHA1

      dce86a4ebc2d4cb88cc8b4ec32af78620d5faa43

    • SHA256

      3ba528c8ec4961d996307ae02792ae0f8f14a3aa481421f56986601114c14daa

    • SHA512

      b038d3e8ebbf8b66bff6a3accce595189b6a66aab62a21aae4a63daeccafb673585b2f72678091677a9f61fd90566e7ae1d984a7f61bcfa743c7000b33799d20

    • SSDEEP

      12288:S6Q+lbwY30jktnS3QnbCxPwxGPuA8OqSzdZ9ndLdgUo9Tad0:0+f+PwxSdux9TaK

    Score
    3/10
    • Target

      零时空/msvcm90.dll

    • Size

      220KB

    • MD5

      67bdb40fbe6cecc320507161b58d134a

    • SHA1

      11ec8313ba20e96a0f776a018586cc127a451e16

    • SHA256

      a15eaabbe6c32fba34c1cacd8c0f206c28a69a8b73e619c962d812ae7fa0f844

    • SHA512

      687289c5740e5316abdaec56bbb6c0a629fc1f374b865a61f71ae3561738b42d3c31987e53ed0dbaed0aefd357824303b0dd7527baa81fee2434a4bcdec6433d

    • SSDEEP

      3072:P5wveocziNzMLSMOYscmuW0AXLiLR4JpA86Goao1vJU87/amFYw8fF01OyAILH:hwyOMqcp3AXOLR4JpL6ft3/amiX2OyX

    Score
    1/10
    • Target

      零时空/msvcp90.dll

    • Size

      556KB

    • MD5

      b2eee3dee31f50e082e9c720a6d7757d

    • SHA1

      3322840fef43c92fb55dc31e682d19970daf159d

    • SHA256

      4608beedd8cf9c3fc5ab03716b4ab6f01c7b7d65a7c072af04f514ffb0e02d01

    • SHA512

      8b1854e80045001e7ab3a978fb4aa1de19a3c9fc206013d7bc43aec919f45e46bb7555f667d9f7d7833ab8baa55c9098af8872006ff277fc364a5e6f99ee25d3

    • SSDEEP

      12288:iZ/veMyZ137mSEWT0VkypLvgLehUgiW6QR7t5183Ooc8SHkC2eU8bw:iZSZ13iwJmgLq83Ooc8SHkC2efw

    Score
    1/10
    • Target

      零时空/msvcr90.dll

    • Size

      637KB

    • MD5

      7538050656fe5d63cb4b80349dd1cfe3

    • SHA1

      f825c40fee87cc9952a61c8c34e9f6eee8da742d

    • SHA256

      e16bc9b66642151de612ee045c2810ca6146975015bd9679a354567f56da2099

    • SHA512

      843e22630254d222dfd12166c701f6cd1dca4a8dc216c7a8c9c0ab1afc90189cfa8b6499bbc46408008a1d985394eb8a660b1fa1991059a65c09e8d6481a3af8

    • SSDEEP

      12288:shr4UC+UumMaIYE8EoPP1cI9xPP2OKDL9QXyG2pUmRyyvRt:cU9FNPPbxPP2OeL9Q2pUmRyyvRt

    Score
    1/10

MITRE ATT&CK Matrix

Tasks