General
-
Target
b55e19a54205bb008650db6c6c92edf8_JaffaCakes118
-
Size
5.2MB
-
Sample
240821-2ts1aayejj
-
MD5
b55e19a54205bb008650db6c6c92edf8
-
SHA1
e2bb626497203f2ce180242f01f62fbe8fd408a8
-
SHA256
7af6c12e4d578674a2bf841a67902acbe2be5b1378af71086f2ea234a54303d7
-
SHA512
bc6cc8d912753beaf6b42e148ba9eca126c93947ef6684471b05be85dfc643db118ddabe1371f8fb5ddee636fec0a3605446ac52ea262331b6a5a776a8697b82
-
SSDEEP
98304:lnGLu37hsrLHgutuQ/CnANIhFM634suz0wbjZK4ScnZM1o0X3vOJ1nEIwQ3dk4Tu:zQLHL/iz6suz0WtK4SVX3uEI/tkIG+mj
Static task
static1
Behavioral task
behavioral1
Sample
新云软件.url
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
新云软件.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
电脑闹钟.exe
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
电脑闹钟.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
新云软件.url
-
Size
133B
-
MD5
4f0017b3b346bd0626f0c3b915e6e734
-
SHA1
823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
-
SHA256
df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
-
SHA512
0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score1/10 -
-
-
Target
电脑闹钟.exe
-
Size
5.2MB
-
MD5
ab540b4166fa9eb51a2287bbf1f34d22
-
SHA1
854bfa8a47165a75a056ade59e3a4a302c9f912c
-
SHA256
215c701a9e27d415c96c19c61784c39c3293d2d3b8cfcea216f93ed43be0e893
-
SHA512
345ef9bd33378b55adabe7cc2badc4c1b6d13d71a10507f27efc04c0d85941bf946f7c1a42dc2ad51e3ee3a856e4549411f7208a8a8f448ef06e2dce89536fb0
-
SSDEEP
98304:E666e82S7W4sTdgwLxHkH8UvlitzTXenHP+r9CDPrbtvC0lJidkS:i6eTTgwLVkHn0t6HP+Chl5S
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-