Overview

overview

7

Static

static

7

WallHack P...11.dll

windows7-x64

3

WallHack P...11.dll

windows10-2004-x64

3

WallHack P...rX.exe

windows7-x64

7

WallHack P...rX.exe

windows10-2004-x64

7

msvcp100.dll

windows7-x64

3

msvcp100.dll

windows10-2004-x64

3

msvcp100d.dll

windows7-x64

3

msvcp100d.dll

windows10-2004-x64

3

msvcr100.dll

windows7-x64

3

msvcr100.dll

windows10-2004-x64

3

WallHack P...00.dll

windows7-x64

3

WallHack P...00.dll

windows10-2004-x64

3

WallHack P...0d.dll

windows7-x64

3

WallHack P...0d.dll

windows10-2004-x64

3

WallHack P...00.dll

windows7-x64

3

WallHack P...00.dll

windows10-2004-x64

3

WallHack P...x9.dll

windows7-x64

3

WallHack P...x9.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0225e48c0dee0800e247fed89d71343_JaffaCakes118

  • Size

    3.0MB

  • Sample

    240820-vwas6atgpa

  • MD5

    b0225e48c0dee0800e247fed89d71343

  • SHA1

    95011570d5d5e02761aa9d127551a4ee832695da

  • SHA256

    6c66e484a2fa3a51f556e6fd9f894bd5445e952c7c669ef43a85f23ab98ff3fc

  • SHA512

    7733c518f702ddbfc57bac4897a68596f013e1ba1c8a0a9e336a6088cc6e26431a154fde513f95a317062b9189ef1c34ecc91bd5e81c5aa1f89d3da8e62fb57f

  • SSDEEP

    49152:lbNUgoXm3xdmf/acUeOMBPTffW17mSP73rM1IKvOZryheWc/Wbeq6sEz+4LHxkpG:l7h4ycDnLfW17mSP7mX+GofdFzD7rUI

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      WallHack PB Windows 7 28.10.2011/Chams 28.10.2011.dll

    • Size

      431KB

    • MD5

      33cf8e60f716988eea3e86ab22667f9d

    • SHA1

      98305643b34b841741e2875a9a66d72e7a63c694

    • SHA256

      83dd415c08dc78ac558c37ae566cc0c43d68333044a547b1538753919ed724fb

    • SHA512

      d947659a829c210e93e2f7d0f6f810dd8d98ddf84daed1489557227d5fe897c516aa9e1cdaf084eb1a6128dab8f7ed7a24a71eb343f05c5e384e6e80186eea7c

    • SSDEEP

      12288:ZnaUYQuPdO9Bjys12227Rrgv1FUI2RJ9:pE0tysk22JgvtQ9

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      WallHack PB Windows 7 28.10.2011/PerX.exe

    • Size

      298KB

    • MD5

      045a1bd611d3a3347945307e785cae9a

    • SHA1

      505248f1d003b828f28211175fd6f91d9822c70c

    • SHA256

      aaafc970e116fc78017319970bd4bb2522a6754e99ac7e696c7fc6dc94d49b39

    • SHA512

      2955c22b88b8b07fc6d992dfb6eddae5b3ba97bc0c623152669081e170cb2b781925247a29d4028ef6f425322122403d67b86b3354c8d82fb123dcd73e3279d7

    • SSDEEP

      6144:EYPOodm30xwcP9n2U82xZkckexoS8pm97WQPhFzo0naGr:zdm3xc4L24cVoS8c97WyXPaGr

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

    • Target

      msvcp100.dll

    • Size

      411KB

    • MD5

      03e9314004f504a14a61c3d364b62f66

    • SHA1

      0aa3caac24fdf9d9d4c618e2bbf0a063036cd55d

    • SHA256

      a3ba6421991241bea9c8334b62c3088f8f131ab906c3cc52113945d05016a35f

    • SHA512

      2fcff4439d2759d93c57d49b24f28ae89b7698e284e76ac65fe2b50bdefc23a8cc3c83891d671de4e4c0f036cef810856de79ac2b028aa89a895bf35abff8c8d

    • SSDEEP

      12288:iHEqYsrMWIqz473PTiPoH/aGhUgiW6QR7t5qv3Ooc8UHkC2eKq87:iH9YsIWIW4rPTiPofaDv3Ooc8UHkC2e8

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      msvcp100d.dll

    • Size

      725KB

    • MD5

      d9b66b1509639cc71ddc703225c65823

    • SHA1

      143d65a3f90c19ea57fd902f35c4d5ca87db2c1f

    • SHA256

      555eb31b526096c6f6a3b6ee768dad1c1ef5cb8f0165071673164d64e7063f61

    • SHA512

      623c60b12e5ba64d6f507766c273989d2c01aacfc5764e597cfcdb2e7c98d41359e107ff309418062ab1df78af764145a28d855637f3ebff51e8dce548cfe718

    • SSDEEP

      12288:C6NK3D/KRhB6y8C6y8I8cLzoyiM9z69Pw9Pj9PAJFxNZVBdplrLg55JFxNZVBdpe:C6NK3D/28cLC2ekwhyO5qa6v3Ooc8UHx

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      msvcr100.dll

    • Size

      752KB

    • MD5

      67ec459e42d3081dd8fd34356f7cafc1

    • SHA1

      1738050616169d5b17b5adac3ff0370b8c642734

    • SHA256

      1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067

    • SHA512

      9ed1c106df217e0b4e4fbd1f4275486ceba1d8a225d6c7e47b854b0b5e6158135b81be926f51db0ad5c624f9bd1d09282332cf064680dc9f7d287073b9686d33

    • SSDEEP

      12288:fQmCy3NeRjkpQmj3oaMtQqjoygfXq3kon9IlbgaOxQdVJJ6j5EBKX8hR5:ImCy3VQs9MtLjTgfa3kon9FaOdEz5

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      WallHack PB Windows 7 28.10.2011/System32/msvcp100.dll

    • Size

      411KB

    • MD5

      03e9314004f504a14a61c3d364b62f66

    • SHA1

      0aa3caac24fdf9d9d4c618e2bbf0a063036cd55d

    • SHA256

      a3ba6421991241bea9c8334b62c3088f8f131ab906c3cc52113945d05016a35f

    • SHA512

      2fcff4439d2759d93c57d49b24f28ae89b7698e284e76ac65fe2b50bdefc23a8cc3c83891d671de4e4c0f036cef810856de79ac2b028aa89a895bf35abff8c8d

    • SSDEEP

      12288:iHEqYsrMWIqz473PTiPoH/aGhUgiW6QR7t5qv3Ooc8UHkC2eKq87:iH9YsIWIW4rPTiPofaDv3Ooc8UHkC2e8

    Score
    3/10
    discovery
    behavioral11behavioral12

    • Target

      WallHack PB Windows 7 28.10.2011/System32/msvcp100d.dll

    • Size

      725KB

    • MD5

      d9b66b1509639cc71ddc703225c65823

    • SHA1

      143d65a3f90c19ea57fd902f35c4d5ca87db2c1f

    • SHA256

      555eb31b526096c6f6a3b6ee768dad1c1ef5cb8f0165071673164d64e7063f61

    • SHA512

      623c60b12e5ba64d6f507766c273989d2c01aacfc5764e597cfcdb2e7c98d41359e107ff309418062ab1df78af764145a28d855637f3ebff51e8dce548cfe718

    • SSDEEP

      12288:C6NK3D/KRhB6y8C6y8I8cLzoyiM9z69Pw9Pj9PAJFxNZVBdplrLg55JFxNZVBdpe:C6NK3D/28cLC2ekwhyO5qa6v3Ooc8UHx

    Score
    3/10
    discovery
    behavioral13behavioral14

    • Target

      WallHack PB Windows 7 28.10.2011/System32/msvcr100.dll

    • Size

      752KB

    • MD5

      67ec459e42d3081dd8fd34356f7cafc1

    • SHA1

      1738050616169d5b17b5adac3ff0370b8c642734

    • SHA256

      1221a09484964a6f38af5e34ee292b9afefccb3dc6e55435fd3aaf7c235d9067

    • SHA512

      9ed1c106df217e0b4e4fbd1f4275486ceba1d8a225d6c7e47b854b0b5e6158135b81be926f51db0ad5c624f9bd1d09282332cf064680dc9f7d287073b9686d33

    • SSDEEP

      12288:fQmCy3NeRjkpQmj3oaMtQqjoygfXq3kon9IlbgaOxQdVJJ6j5EBKX8hR5:ImCy3VQs9MtLjTgfa3kon9FaOdEz5

    Score
    3/10
    discovery
    behavioral15behavioral16

    • Target

      WallHack PB Windows 7 28.10.2011/Usar essa dll caso der algum erro quando for ejetar a DLL/d3dx9.dll

    • Size

      1.9MB

    • MD5

      b17fa8b31d403faff9143c5bd2f4646e

    • SHA1

      b29a8088af11bae0048da6df0369cff72f8e302d

    • SHA256

      17cb112704b3f7cf70cc386e50a41304ad6508e95265c00e4ccc42aadc5454b1

    • SHA512

      f664cbf2916192e64521b4885e3d09f609af5742ded50adbfd58aa1d80b1fb2c3001c0f5e20b4609d74ad56ca2a23b9014a0260bd5b759c095c0f4de88333b5f

    • SSDEEP

      49152:zrlaTZoJu1wfuhM2dhYmnU1dE1KCdQiCPnLLc2//Viij3YVLiiZBhs9LCrMgl5:zrlaNoJu1wfuhM2dhYmnU1dE1PQiCPnw

    Score
    3/10
    discovery
    behavioral17behavioral18

MITRE ATT&CK Enterprise v15

Tasks