Overview

overview

7

Static

static

3

HXQQTalkV16.exe

windows7-x64

7

HXQQTalkV16.exe

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    ab1e45588e69886647fd93bd3aef109f_JaffaCakes118

  • Size

    4.7MB

  • Sample

    240819-p7qqvsycrr

  • MD5

    ab1e45588e69886647fd93bd3aef109f

  • SHA1

    1ac6eb1915b2d6fc32974a71fd48bd3ecebbd01e

  • SHA256

    8e6b4c38e7b6610204ff9b1c291ed209f505b4cd2a0c7b49065b0e38bf72ad93

  • SHA512

    2a47ebdd424ac691567c223520d60412492bea15bd7186971a2db4b6c3291836d283f0758e41e95f099aa9764c2321038f505c62caeaa3bbd66235a9e1780c1b

  • SSDEEP

    98304:navArsWmWLyli5xRsK8ppu3ymqIyzMb5ZVBngdtwilL3Hrwt+rfOWAHxqJG:naKIWLylWh5iiFDCweL3EcfOWAcg

Score
7/10
discovery

Malware Config

Targets

    • Target

      HXQQTalkV16.exe

    • Size

      4.9MB

    • MD5

      208ab754d2c523ac47156dfeb70525e0

    • SHA1

      4b6bafe2b7f77cb057c9743b14108fbd7f30eb3e

    • SHA256

      7dbb2d77775da7956d84ccae9e10b01369bd74f4a93e3c73578f08f9b43d0f04

    • SHA512

      d70d170f78af3115fd9c9e1a7bc557cbc5aaaab4890797138bfa8a2480ab8df0298abb895f0d8e22f28fb142448392860dee7c719e6f5850f75c4499a7a3b3d2

    • SSDEEP

      98304:UX2+9BUok0MNZHfsOw+rk/VUR5+2UMogDfR73CD/ShY70rRrN6NzzNgb:UXb53MNtfsqyUf++Jfh86C0RUvG

    Score
    7/10
    discovery

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks