General

  • Target

    de6a8fd1a400654524a020368e2589b7_JaffaCakes118

  • Size

    777KB

  • Sample

    240913-shk1vsvgkc

  • MD5

    de6a8fd1a400654524a020368e2589b7

  • SHA1

    ce5cb6edb52e2cf7df0dcd88eedfe498cdce359d

  • SHA256

    38d649558fc4d9746a3e69a28c1e7c1a003f8116e2a13d7f22b0fba9066dacb2

  • SHA512

    03e305e7e9d90a1c05448b5c87b96065f918968691aad689b79069e9b2089ba7cc30ee21be162b697519e1e3c1df530e48103bf1d407584a9a02b35426111df7

  • SSDEEP

    12288:p4vIIfyR52uJqaIQCmWTuKi5zQ0IUOxmCp+yaE9+mvswzd8YWb8Of+MrOSJ:p4Qsyv114L2U+6p+hmfvZzdhS8ctJ

Score
7/10

Malware Config

Targets

    • Target

      qxlti2008.exe

    • Size

      782KB

    • MD5

      fc6b961cd776153e9425738816186a61

    • SHA1

      c9b2f2b0bacdbcf5936da0f78ffdffaa421b1a44

    • SHA256

      40b94ba25bec939535ea5e21991cf552503379fc8da7ed8635f3eabde6513a7a

    • SHA512

      83ee5ca27608c2fc2fc8318d20105889ff05a95de9f7a527c75d3e909f919455f8b437c296b731555739d5211ca6414810ec85ad03d3a9160977125aa01967c4

    • SSDEEP

      24576:pNSIjNmX+VSNCvwNuDNZrRO8o41nrUXE0:pNSIjNmdNCvPLJt1nz0

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

    • Target

      新云软件.url

    • Size

      133B

    • MD5

      4f0017b3b346bd0626f0c3b915e6e734

    • SHA1

      823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92

    • SHA256

      df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678

    • SHA512

      0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks