4e29c0ba9d09e1f8beb149f7297f06b3984c3090c32391370458a1d890e76f2c | Triage

Sharing

General

Target

b26a573a6486d66cc73b64a90623cf68_JaffaCakes118
Size

11.7MB
Sample

240821-g8dhxsxflp
MD5

b26a573a6486d66cc73b64a90623cf68
SHA1

e4ab6453e07447ece2f2e03b7d0d5c23eb012002
SHA256

4e29c0ba9d09e1f8beb149f7297f06b3984c3090c32391370458a1d890e76f2c
SHA512

83936626ab0b2fff9b944a042e07d87a0babc0433a338dac0893df73c2afa2af8892f3150c1f4677fd08b513218fb522b4dbbaa6b8d454bad2dfe2c2116ed10c
SSDEEP

196608:PqcinofWkRRsnA65igkL9Dhu9uUzMzv3B2ZJQ+/n4FaIGisu0eFz0fSdLAPQZSjE:/PRRiwZLUo2TQG4wdun0qd8YZS7U

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  cyberarticle-5.3-2009-6-11-crsky-setup.exe
- Size
  
  11.7MB
- MD5
  
  9e0e4751c795425d6eaa813f3991ec92
- SHA1
  
  1b08e0137bdff848023b9f12567d20ea7f320774
- SHA256
  
  0b9d803eba981c9202f4b60be9965f2b3cf4ffa9826763e90496fb89f71fa6c4
- SHA512
  
  616557dd8a615c9ffc7c7aae21592a709c550e3958923b000d3ee8fb6b7b14534f49b1889d43e6463e0fb01d19220759f4d175fd637f1b02e48bda576da49471
- SSDEEP
  
  196608:3cCx61EhWCYDJYJTctjWELBA98WEviRClyLjHXN8ZrDvj8tj0inYsocPgUg8G6YY:3k/CYDeJQjBnWEaRClyLj3N8hotj8so2
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  新云软件.url
- Size
  
  133B
- MD5
  
  4f0017b3b346bd0626f0c3b915e6e734
- SHA1
  
  823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
- SHA256
  
  df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
- SHA512
  
  0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score

1^/10
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4