941eca038e0c93893666d096d658b6fb2a4ba56dfec97b5c67e748c521207dfa | Triage

Sharing

General

Target

dfad126e879487dd726d92a3415caf17_JaffaCakes118
Size

944KB
Sample

240914-hf269a1glb
MD5

dfad126e879487dd726d92a3415caf17
SHA1

d1c8c7f2aea6d234599fb1f191c00eed2c6258e7
SHA256

941eca038e0c93893666d096d658b6fb2a4ba56dfec97b5c67e748c521207dfa
SHA512

09c685fdc4b676119d05b4a53806c5b4f471276c7e8943ebc16390b5fad846440fbfe80423f3e5b117246a75951a61ad839c16e9b4ad3c224ca1dd2b1ae0cc07
SSDEEP

24576:TiP9I//9hundD/039ufSaVd0rltrEQ5l8VyP1IP50fU:Te2/Yc8fSaV8ltrtX8VyNNfU

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  Notepaper.exe
- Size
  
  967KB
- MD5
  
  6ee27fafbaaf510fd200d0078f440316
- SHA1
  
  cb2d650e87437ab509809e1198df8aad4923a84d
- SHA256
  
  bc3a4682c3cfe3668f7db9080d1bc9ccf760a960bdfa280ee6647f176b2f035c
- SHA512
  
  67d72b8ef006de8aa2b9648f531ef5a871326d728f4e57e3b63d2a4beb40dce6a3c3753732b45197daf3d45bd07a1553543c5732ba74246b46a17b091de9dba0
- SSDEEP
  
  24576:EpnicFEkzS6jm0dBFsDL0vSaTX0U5sa3kY2+mO8u:ai2Ek7jNBWDL4ScEU513O+mO9
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  新云软件.url
- Size
  
  133B
- MD5
  
  4f0017b3b346bd0626f0c3b915e6e734
- SHA1
  
  823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
- SHA256
  
  df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
- SHA512
  
  0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score

1^/10
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4