9210250a78ca16fa8c930c89daa2e8877c075b90dd1d94082cb7638e79ae46f4 | Triage

Sharing

General

Target

ead2649d9b313eb2c4d39ed48884d256_JaffaCakes118
Size

2.8MB
Sample

240919-hzcqpswhrp
MD5

ead2649d9b313eb2c4d39ed48884d256
SHA1

5fab0ecb8ee3639aca9f4ba41bdfa7a47b53cf56
SHA256

9210250a78ca16fa8c930c89daa2e8877c075b90dd1d94082cb7638e79ae46f4
SHA512

dd58a42c5e72bebe4972e07ca090f2b4c36cf4b87d06ca74741b6517a8feec09315577f2a01655e772bbfe6bcb4b7ba3ce3ae5ca17413afa80cdd657797f8d6e
SSDEEP

49152:+Mhca5E1jbFXD+eJxaa11I4u3mhhKgkq8xxCwydPHh7HhI2QyyYuFmFP8vsLen2:+POAjbFzjxa41T4mhkgkZHadP5BI2Qyp

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  155绿色软件站.url
- Size
  
  219B
- MD5
  
  3a1f2a8a3ef08ae269517a69ea918b2c
- SHA1
  
  7d2e6719702bc8472e045e010efa6ed3f7df4b5b
- SHA256
  
  66eafefa8bb0155e60828476bde6068573fe64a4fd0aa052eba074dbe85d46cd
- SHA512
  
  22203a78192cadc02d0f887247675925273a69e3be82ec1a331197f892216a282cc8f37c3ffbfb578a708244181037277b8cc6a40d8ec70cdf0feac5d80f8576
Score

1^/10
behavioral1 behavioral2
- Target
  
  crack/WWWFileSharePro.exe
- Size
  
  187KB
- MD5
  
  adeb908930d3afb4741d6de1095fecfa
- SHA1
  
  606768975f214083ebd118fbbcd7a15dafb11831
- SHA256
  
  6bb05b26e705ebfb0c35c4a11dd884317368e26e6180f8d74975b5c4d2008189
- SHA512
  
  9c30233545211c9a53a5734cc518451af986b80906683765938af8c601a44d9fe588c91b45f969b357eb8890616a19c7dcb7a3f77847b4803bb1f2336cabc22f
- SSDEEP
  
  3072:Vxp8s8TaAoszfG/ulZV54thbA4Tm8wVq2NCpZwvMifmy+KnEylzcToL:Vp8TaAostDChbnTm8w6wvMIz+qCS
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  wfspsetup.exe
- Size
  
  2.7MB
- MD5
  
  c5cc6fcf5937410227371debd855ef7d
- SHA1
  
  1c8b887aa16be8eba6ff3d2ddd5c5bc5f99112ac
- SHA256
  
  72f5b93c25dde71579e2a7e742db81da6b64c8b3cf4cb133046c593ee5a78a00
- SHA512
  
  f2f8f4c405cf3e1c32f71f064e8f08130d2c4d7fe9ee73061a1e8e9373e1eceedd685fa67af1f5282ab2cb643e257cf8b67f658ccc55bbacbe75ec698b7c2768
- SSDEEP
  
  49152:v2hcTxodTaYRe3WopmNtJf4A/AJ3Bdwhd3zY8ArlE1KQjjJaV:uK6Taf3Woa63Bdwjz1Kt
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral5 behavioral6

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6