Overview

overview

7

Static

static

7

July.chm

windows7-x64

1

July.chm

windows10-2004-x64

1

July.exe

windows7-x64

7

July.exe

windows10-2004-x64

7

SysScan.dll

windows7-x64

7

SysScan.dll

windows10-2004-x64

7

plugins/May.dll

windows7-x64

7

plugins/May.dll

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    b581872c87bccb5ed3c2065902598989_JaffaCakes118

  • Size

    472KB

  • Sample

    240821-3n3szaxalc

  • MD5

    b581872c87bccb5ed3c2065902598989

  • SHA1

    ac5b3273927be6d88b7c36777c57d03b378dc5ab

  • SHA256

    8cab07562beada557f3e286820aeb87477d11cb2870bd67387c2c66cb78fc57f

  • SHA512

    1b0535937d525c384bed38ad97459d630f36130ee3e14b5e0659302eb877fb3567891debaec403e69cff6a91e4a534f251d395ef0a02a7b55ea6beea9a6a56f5

  • SSDEEP

    12288:JQ0RG9MAQ0kLAMy3s3ZYzVmnTASkqqqgNXLvpwj1sPBeumxh8:tGyy3sptTAVDjtZP8TP8

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      July.chm

    • Size

      331KB

    • MD5

      eba6184a32db390d3bf5f9c3ae547334

    • SHA1

      3a657a3c17714c464a70a1c4f7fe34885133ce4a

    • SHA256

      269fcecf86d47adce7bb23f6183aed46ae6e2a3073cb634635e6a21273d3c6a3

    • SHA512

      fa8af4b177343463dd1b7d7485db2363968fcaba88cdecef7898b40f6e1121e85aee0c17a5832f60964e31b180bf5bae7095c7993ab9aa20ab1be6f5d9b45629

    • SSDEEP

      6144:xvnjvXRoGhSyxzCbdmFq9MFx1jXFkA45U5IflhHetnVgqqewb:hvXRoGUTRmFEMZjSA44Idh+p6leY

    Score
    1/10
    behavioral1behavioral2

    • Target

      July.exe

    • Size

      73KB

    • MD5

      74d0bdefeaae305d2b2f377015fad20a

    • SHA1

      ed092d88c7b6595cd1a93c1e4feddea1e5d82ec1

    • SHA256

      5ff726015653fbcb219c3fd9c56280292d53cf36ddea8903bd32331ae7a3cbff

    • SHA512

      af127522f4032639fc749b7a837528593ba4c9c2af74382db06e9f2e1878f47d96d1e696b08f8bf61d4ca16349c98bc6df6149439af88c48a997b6fb8e452b48

    • SSDEEP

      1536:xUp3WmO4r2N6GUOCxLkSJFygejo+sWuW9NnfPNjTYgbD1:xrpjUOCV7JF2jo+buW9VP1TBb

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

    • Target

      SysScan.dll

    • Size

      39KB

    • MD5

      fae3de16b82f214e197cdd493bc18718

    • SHA1

      dff1564b2ec50f8ccbca235b98ba0b6697aa9214

    • SHA256

      5bdc5bac44ccceb4c000199bf3f2f1eaf081ec90fe8c64fd7897e8723945d683

    • SHA512

      769c83f2f2845f7b7e7fe446e3f829a792acae7581d669950a0efc2f3415b33190521cf2ac2a0e5bcb492dee3a2f8c317d47d0342b7737d901a08687d2a92139

    • SSDEEP

      768:0Qc2P6ltwBMRSFR4QHPaPVf4KEwE6MbcuFaHYOFD7SByM1iWmWKN8go:0gP6luBMQn4QHCPtPEw43aFWyWe89

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral5behavioral6

    • Target

      plugins/May.dll

    • Size

      34KB

    • MD5

      536777e1aadbbd0054acee3c46379685

    • SHA1

      bbfb340418c3ebe3f5f1b98d87e21d44d5fa70f8

    • SHA256

      9f3e72dbcb802a292f6769cb2ab0a8996091cff109a82f2e65b4a86f0bbd5a0c

    • SHA512

      c05ae91559e9602938fb5f81ed2d6564a4b6c709e4f374811ad63e8ab47e9fbeb4e0d0efc0e9dbccf2e0cca6bf456f1f4b0a2e80b2d2e0a96deec02d733f7d88

    • SSDEEP

      768:nanL8/R2/ROkvaNfSlmRzVwfYxTBuxTNZaI3B9kEuI7MzbXzi:n3/I/gkvo5xTB6baI3B9aPXe

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral7behavioral8

    • Target

      新云软件.url

    • Size

      261B

    • MD5

      af534adca72cbb40fcaba6adcf4aa0b3

    • SHA1

      486f64259c45baf815004b6ffc65301e82aecdee

    • SHA256

      1bbc2bfe53979f537c179995a1d1b5030db3ad6f2e46b258421506a3fb0fc296

    • SHA512

      21d4b21c0d228498275640b397e8adfcb92dca4996cb59b035eeea523c5fd0594b0c8bc66d557265343bf6e7cb35350790fcac323db841c0cd4fea6da38b70b1

    Score
    1/10
    behavioral10behavioral9

MITRE ATT&CK Enterprise v15

Tasks