c22601fc4638931799fbfb85d66747453a91d5cb6cd9eba04508738d7b224249 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b55efd80e2e49a6ddb02d77b783b8826_JaffaCakes118
Size

2.6MB
Sample

240821-2vh7gayell
MD5

b55efd80e2e49a6ddb02d77b783b8826
SHA1

136cc5e3975c4dd39c70b9888cd54b63907cd47b
SHA256

c22601fc4638931799fbfb85d66747453a91d5cb6cd9eba04508738d7b224249
SHA512

76c42f82f0529b5d93fb85c62ab8ce2f65b8728502a4b227b0b1ff3c21389137e29a933e35d643cada62bcba0348cc1f84c3eea1ff0e5f7f37bed7be8ef46ffe
SSDEEP

49152:ltkkbbBM4NxAs3GUyLo/s+9xi4HM1pUdOVcBOom8gPl3EMxPPdl3aYNiOGhgZf:lHfSULuMs+9xicMH3GB2t3EMxtoI2gZf

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  FalcoIconStudioSetup.exe
- Size
  
  2.6MB
- MD5
  
  e5a0a3eca1b1997bf5773f89d79c136c
- SHA1
  
  a130c6d82945a33f33d9243ae5f57f7449df9177
- SHA256
  
  5c9a73beedfe640e1d19c03e541db620a0bee4cc9e19a4f4bcd35f7cbadd08c9
- SHA512
  
  0aa407ef77334d4c317667d5c6d0911fb16693589959cfb4625471637ee0a13e8cb1d93f206920884e3623bfd7d9dd42fc7f8ad5080549e488b862a32c58f137
- SSDEEP
  
  49152:76dT36zSHZ0NT5cMLM6+LUbMuhg6x2l/HKyrkvSFB2DXpVl6OtlO/mNkVbv4e:edT3YNT5cVqbpgq+B/6x7ObVb1
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  新云软件.url
- Size
  
  133B
- MD5
  
  4f0017b3b346bd0626f0c3b915e6e734
- SHA1
  
  823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
- SHA256
  
  df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
- SHA512
  
  0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score

1^/10
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4