General
-
Target
de6a8fd1a400654524a020368e2589b7_JaffaCakes118
-
Size
777KB
-
Sample
240913-shk1vsvgkc
-
MD5
de6a8fd1a400654524a020368e2589b7
-
SHA1
ce5cb6edb52e2cf7df0dcd88eedfe498cdce359d
-
SHA256
38d649558fc4d9746a3e69a28c1e7c1a003f8116e2a13d7f22b0fba9066dacb2
-
SHA512
03e305e7e9d90a1c05448b5c87b96065f918968691aad689b79069e9b2089ba7cc30ee21be162b697519e1e3c1df530e48103bf1d407584a9a02b35426111df7
-
SSDEEP
12288:p4vIIfyR52uJqaIQCmWTuKi5zQ0IUOxmCp+yaE9+mvswzd8YWb8Of+MrOSJ:p4Qsyv114L2U+6p+hmfvZzdhS8ctJ
Static task
static1
Behavioral task
behavioral1
Sample
qxlti2008.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
qxlti2008.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
新云软件.url
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
新云软件.url
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
qxlti2008.exe
-
Size
782KB
-
MD5
fc6b961cd776153e9425738816186a61
-
SHA1
c9b2f2b0bacdbcf5936da0f78ffdffaa421b1a44
-
SHA256
40b94ba25bec939535ea5e21991cf552503379fc8da7ed8635f3eabde6513a7a
-
SHA512
83ee5ca27608c2fc2fc8318d20105889ff05a95de9f7a527c75d3e909f919455f8b437c296b731555739d5211ca6414810ec85ad03d3a9160977125aa01967c4
-
SSDEEP
24576:pNSIjNmX+VSNCvwNuDNZrRO8o41nrUXE0:pNSIjNmdNCvPLJt1nz0
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Drops file in System32 directory
-
-
-
Target
新云软件.url
-
Size
133B
-
MD5
4f0017b3b346bd0626f0c3b915e6e734
-
SHA1
823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
-
SHA256
df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
-
SHA512
0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score1/10 -