6ecd3088a0cb058bfd99749123965b8cd474bea00aa07e2f0adadb568e931311 | Triage

Sharing

General

Target

b2d0544b6f8d8deb104c25de2fd0ced9_JaffaCakes118
Size

2.4MB
Sample

240821-kpm5sstamp
MD5

b2d0544b6f8d8deb104c25de2fd0ced9
SHA1

93916bac971fdd624330df4db79282c9acbf819b
SHA256

6ecd3088a0cb058bfd99749123965b8cd474bea00aa07e2f0adadb568e931311
SHA512

75d89de4967c0c41d8e8c8c74f70f7db465aa2cd3442c71a2d86cd35d142c54cd07e2c9db57af81b11fda69dccdaf9fdf1d742c51e521c1543ef0bf8996577e4
SSDEEP

49152:8c6Bp91o/7P6rH8GY0WFdGrD+M8G9X4lnS1xCvL8Yx0UY9uOADRP11:EBp9SHGY0Si3XkS10v9YKBb

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  Dianzicheng/setup.exe
- Size
  
  2.4MB
- MD5
  
  ad3b9004296be84eb4f187a8a43f286b
- SHA1
  
  378d8b8309dee67c7411d07506dd5f83a5fb4387
- SHA256
  
  8fc95f5bbb2cb9c7d9c09e2e64308baff4609954d6e4a8c2051941ac12e0e362
- SHA512
  
  83da23009756c3e8ee9df6c44f49de67086a7c3f1d2945a4019bbb22e08660b5528f33a39200ad88e9a2d86a6da107a9d1a0caca4497bdba86cb18b5310b3a39
- SSDEEP
  
  49152:HDA/zEHobBm/fyrhY7K52SFHw3fEEm6j2k3p72hu0kULdv8vYe:HAFqyrK7KXe3fLmM0kGdv8vYe
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  Dianzicheng/新云软件.url
- Size
  
  133B
- MD5
  
  4f0017b3b346bd0626f0c3b915e6e734
- SHA1
  
  823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
- SHA256
  
  df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
- SHA512
  
  0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score

1^/10
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4