Overview

overview

7

Static

static

3

hlebyq-v2.0.376.exe

windows7-x64

7

hlebyq-v2.0.376.exe

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    866d94485a7cdee6569b3d463b8d1c9e_JaffaCakes118

  • Size

    3.5MB

  • Sample

    240810-rwzkqsxfke

  • MD5

    866d94485a7cdee6569b3d463b8d1c9e

  • SHA1

    5dd7fe76c74f19a03810dcfd298d192b4e6623c8

  • SHA256

    819ef3972bd917233a73b2173b8088d067abc3f5f10e7349726dcd4dc5652b70

  • SHA512

    30c738bfdaf0e68a21df42f8cb539dcbdd47b6e38b6024632f79fbe270f022d923a9aee32f95a9949dc933cef0099450f065d7e830dfc17a09321b7ffce37c89

  • SSDEEP

    98304:0pHHbE4R82ep0Wz+K+DDOy2YDIO/1Gzars/uB4w:Q7l25+POytDZGzarsw/

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      hlebyq-v2.0.376.exe

    • Size

      3.7MB

    • MD5

      9b49ca486827411989db3d4260b2b6a9

    • SHA1

      82b6f26fc4c61051fcf290c4a88cbad806a72ed2

    • SHA256

      c17d676add9cd843a02e06a3aa58d79a255fda74eaf5c153bc1beb66b24f7b3e

    • SHA512

      5c5b8eef2e40e8691fe109507dc4ee32b93eab3d1208f3486118a56a70d5538987a2488f898c268227adc97a527ccaf497288f5cf0c2737045ee033e305789f0

    • SSDEEP

      49152:wl8eOBa3XJmYtUtXg8AiHZ/qY2DM2x1q/C1PaPKYBTggKW+sxq2Tyuzwjwk:wZR3dutXJxUI2x1qEaCqUb7sY2TyJ

    Score
    7/10
    discoveryupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks