Overview

overview

7

Static

static

3

Windowsjiasuqi.exe

windows7-x64

7

Windowsjiasuqi.exe

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6f3c4f180fb8fbb38a28644fd98dcc5a_JaffaCakes118

  • Size

    2.4MB

  • Sample

    240725-mqcfsstfpj

  • MD5

    6f3c4f180fb8fbb38a28644fd98dcc5a

  • SHA1

    a59aa8658472d751be6f6781c2f03d16a4a495c9

  • SHA256

    0a9c3f97ed94310304a2e105ac2c1b7cbe418b23069344fbfcbbe1c561a30408

  • SHA512

    484e24d2f3383107d392de3e1b691019323c2be327e6d792ed60615a676623452fa0eab30b48f694869dfb6a179e94e43285ab465ce757635613e1686736ad86

  • SSDEEP

    49152:iVlwPtzCMYpU+mEzhSPT8liyx8EBIAZYJOSQIc9qpn:ifwPdCMb+tSoliy7ZYJBNc9e

Score
7/10
discovery

Malware Config

Targets

    • Target

      Windowsjiasuqi.exe

    • Size

      2.4MB

    • MD5

      1c0965ecd6e3b1a593cb0ccc470ca9a1

    • SHA1

      c4bbe15ed5ace1489a6bc71bc1cbb270b71db1bb

    • SHA256

      3f7b8e7303a811633322bef92fb52e1dcae3c6c71d81f6b4dd43a4ac639625dd

    • SHA512

      4d443e360ce94380b096caadc1041fbf897546e9f3761850344c5888df0b848067d76bcfd200ade7dcc8a0316881f434058c047c0fff72371803832ceb180041

    • SSDEEP

      49152:aj/MysA53FHWwsRHdBWlllp4AxSI0Njb66zFQUWxsYPINnCjxKBiUU5jF:aYysArKLAlllpkfFWhQNnRitjF

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

    • Target

      新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks