5678456f8ad1751eaa10f1cc42b05d97f898612079e9469b279201e275a0ad0a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab5882eb27a54015098e4c3c595ec0f1_JaffaCakes118
Size

3.4MB
Sample

240819-rj4zpaydnd
MD5

ab5882eb27a54015098e4c3c595ec0f1
SHA1

b5f0e456354a48d72a4479754a20cc28544d711a
SHA256

5678456f8ad1751eaa10f1cc42b05d97f898612079e9469b279201e275a0ad0a
SHA512

b5b779a0744228d9699dc672b1864a47b5d4a9de4b728c55dc60b3ea2e8ba55f065e73e489b8d749e9841c0d9ac9306315722dd801ad50dca19d0a5945a52961
SSDEEP

98304:Zip/xsOzyvuV3MCLlfKToE0vukXCs9q/YtA:ZipxQvanYTi7XA

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  ssq500wan/setup.exe
- Size
  
  3.4MB
- MD5
  
  f0492467d71e0ae973ef88adbe39197b
- SHA1
  
  559ae35eba0c736808060a26d08ae4c6d86dd063
- SHA256
  
  e4a9f229f2ca7d0a79851021c5073c378b9f900ae0c356bc168bd762069b5be1
- SHA512
  
  6abf290030a7983633bfdb7c164a9c96e9ab6678f6cb5938ae77e37166435a7fc926a704364bab8b3f938a037272905fdb45809a191da4d1c1e4612fd111262c
- SSDEEP
  
  98304:/QdxiBfxPK1Y7WkacPykaR9b4dc1YKnl6N2rE9:Yye1kacak24dc1MNb9
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  ssq500wan/新云软件.url
- Size
  
  133B
- MD5
  
  4f0017b3b346bd0626f0c3b915e6e734
- SHA1
  
  823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
- SHA256
  
  df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
- SHA512
  
  0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score

1^/10
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4