Overview

overview

7

Static

static

7

等待QQ�....0.exe

windows7-x64

7

等待QQ�....0.exe

windows10-2004-x64

7

等待QQ�...��.url

windows7-x64

1

等待QQ�...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eab5363593c6e88e71b636661a20efba_JaffaCakes118

  • Size

    516KB

  • Sample

    240919-gl82bathjn

  • MD5

    eab5363593c6e88e71b636661a20efba

  • SHA1

    8eac900779c3a408d44070585e32d55aec5484b9

  • SHA256

    f330ad5e2c2ddd6718ff3511b55a776064c9d5a0490b828c88c9204b3abd9802

  • SHA512

    2264e76f8e6511efd6ab356f058047ee6a25d3ac0f574b965aef8d95072073333a8c723e7e9fa4ce11909b59859786ee4e473106e548d278ff155c272d8ec23d

  • SSDEEP

    12288:RWEUaO0ctADQolJ+EFez87WEh8CCd8AJV:Tbv3+EI4SO8CCd8wV

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      等待QQ空间留言批量删除器 v1.0/等待QQ空间留言批量删除器v1.0.exe

    • Size

      600KB

    • MD5

      07863b914ed84bcfe0ff101781bc3b82

    • SHA1

      455fb910ac5e3ed0d2743c8a2defc1a1426075e0

    • SHA256

      46e08abab07c3454801514cea4d328cc4c96c2691ef11526cba5b7dcc0ad8700

    • SHA512

      64dbf34d4f6abd229a650dcde11a9df6c37407e90a68f9721fd106614f3e12f690ce818be44661413046d988275d79514f8ab77394c153beb107ae7e732efa54

    • SSDEEP

      12288:SXKNcA9hT7QJ+64qcpTMWPjAUuo2Vt78X+aZorXM7YPXPW:S6N3a+dr/0Uu5x8RM87Y2

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      等待QQ空间留言批量删除器 v1.0/飘荡软件.url

    • Size

      328B

    • MD5

      e97aad722245bfc4a60be0e6f453be6f

    • SHA1

      c7b7c9585109f71526ed65616668ef7573841d9a

    • SHA256

      3f6b8de5ca595a2e7371396fcb22b303e0f664733aabc940657c33324d5f269a

    • SHA512

      f151b723079fc09ac4b44c540b278b8c273f3958d5b661a6b30e31b119dca6d017ab0f987c52c60cc46e917ef9626e943971017d8e1dfe11c4cf27b93a2c772a

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks