Overview

overview

7

Static

static

7

SMBB4SJBZW...se.dll

windows7-x64

3

SMBB4SJBZW...se.dll

windows10-2004-x64

3

SMBB4SJBZW...sh.dll

windows7-x64

3

SMBB4SJBZW...sh.dll

windows10-2004-x64

3

SMBB4SJBZW...me.exe

windows7-x64

7

SMBB4SJBZW...me.exe

windows10-2004-x64

7

SMBB4SJBZW...ex.exe

windows7-x64

3

SMBB4SJBZW...ex.exe

windows10-2004-x64

3

SMBB4SJBZW...47.vbs

windows7-x64

1

SMBB4SJBZW...47.vbs

windows10-2004-x64

1

安装程序.exe

windows7-x64

7

安装程序.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    eb884334c2e0a19815c71b001acdfa8b_JaffaCakes118

  • Size

    2.2MB

  • Sample

    240919-rvxpratflq

  • MD5

    eb884334c2e0a19815c71b001acdfa8b

  • SHA1

    2544877272e4b72bafcc9e18f6a1c03c7fbc95d7

  • SHA256

    8bac5102eb7fe6db3460ce0706f29b499ea607075ac3cf98bd197b7d0fb9dfcb

  • SHA512

    e703226cc0bdfa8353045363de7cb06306c6c1fddc92f0c600be31e03f104e0141435baf25ab0e107f0aa7037616ca0dd460159f79a6d1f01474118ce9cb576c

  • SSDEEP

    49152:xHZgQsCklW+QtUYv0zGdnfW1hE/Slip0q5Is0EJUDUd/0Xjo:xHrYW+Qt30zGxfWTlRxgdsXjo

Score
7/10
aspackv2discoveryupx

Malware Config

Targets

    • Target

      SMBB4SJBZW/Chinese.vlp

    • Size

      76KB

    • MD5

      ad664e75802d8512f8f01cfa796ec078

    • SHA1

      29ab673ecb0767b27428673bc69484bcd8bb027d

    • SHA256

      b5692681c05c8806befaa5d4f32af35fffdd56c498db47d0923a5cb505bf1669

    • SHA512

      7ccbeff5b6e2ccea8391a19867fca93c15572f5d236c578dee4a49cf6c7c42365a6ebb1b4c3ce7dbc1c9fa1c7e0b5b196161720cc882557927f9b2adcde2db73

    • SSDEEP

      768:K2T1WUf74R+AlJkdDXiQfzhEWLAvlWdygqvVykUzc1Y88rcqWDSJG:K2T1WUs+DXiwJel4ygqQkUQ2cXSJ

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      SMBB4SJBZW/English.vlp

    • Size

      72KB

    • MD5

      9e7f11bada9c176c316262a251b47c82

    • SHA1

      52e9c749d40b8167b06744358e1abfcfe600bd4c

    • SHA256

      dc0868d29cdfd9d72617dca144a4848e56794d25362dbddc318697a1322d3f0a

    • SHA512

      ba9d394e95dca3a11376db0f33254796c673f3ca18cec24dccbfd495441f1443a35d75afbf00100ecd4c7398574c11845f0c015301fcd52f444ce207babb0f1a

    • SSDEEP

      768:PYVTOFpfxRPpxOSKlWls5kUGxZ0hx7EfNGRSBXwV4HuSkK2G/6:PYVTO7pBKl7TbS3Hy

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      SMBB4SJBZW/PlayGame.exe

    • Size

      2.4MB

    • MD5

      5b22cf0c1d04c56242f716a08847544a

    • SHA1

      5896d44b0f22ba341d8e28844f6e23ba2b8061e7

    • SHA256

      f112e6588decb47cc0d6b92ff44af7d9dde37089cbc9deb6a4337e13d84de32a

    • SHA512

      1e2e909af5e764d4a9b5971da1a81f4506bd57a392372a071eaed0480b8d1c95fe3bae4beaab18b544f548b655e96f8be2749812993d90574fcecddc17f26479

    • SSDEEP

      49152:SO5oWaKv+hyz8grnkQfKEUSKwmsDExssYDcv2pf:CEv7z8iCUD6Mc2d

    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral5behavioral6

    • Target

      SMBB4SJBZW/VirtuaNESex.exe

    • Size

      736KB

    • MD5

      e0e4d8348165d7cc3b39762962d4fbe1

    • SHA1

      1cce2fd6f7a77eef7f978197d2c2442b6447148f

    • SHA256

      09eedcce38c0bb4f8af910210fa0dd2abde3772423ca9e78ffa751c28f9d2ea5

    • SHA512

      6e8facc4d80c9eca6dd74b6955d6d494a3134339b5f8409ffc63416abb21d5d41194d5a273edd4bef2010b5891aab71c97af10131d8c944601c1329aba7ec34f

    • SSDEEP

      12288:PMZ8/t59WVEApqn/joRsfHWuQV6FMffGIzBb1Py6MaGuoFZ7pC5SmrBPJe:PMCRWqsq/jognQV6FqzN1Py1qaCNRw

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      SMBB4SJBZW/mapper_src/Mapper047.cpp

    • Size

      5KB

    • MD5

      a544c07949db56b94029df6cd8526476

    • SHA1

      62835027c921fc7b4d3647cdc1ef52c35c904e08

    • SHA256

      a1a983e034672bbd9149a7a365cb85bdfd75648c60bed7a2192e5f282057f1ca

    • SHA512

      8b34f221ebc1415fbd8dd0dcc2cf1f04a47fbfa9cfc760bb505e4c6f47469089b0223ae5f9635c00f97f72a3009915a8a45d99a05dd3dcf140fcefe68cb9ad41

    • SSDEEP

      96:jNrqwKZ6L1/N6LuuijaWtxPMH4H12H4HJC0w0OYIEbqjowj+KjgbiCOjtrHDA6Bk:jNrqHq1RgM6YV2YIDcIEO8wyKMbverjG

    Score
    1/10
    behavioral10behavioral9

    • Target

      安装程序.exe

    • Size

      543KB

    • MD5

      f3af3843f2d570b840febcdfde75eff8

    • SHA1

      e5ceaae62ac6f40e71915f18872db7699b9e85c1

    • SHA256

      6d5cf7140496e8006cc9fcb87618ecc572b36353dc2977730f390c23ec46e418

    • SHA512

      b808344d10f0bb5f7dd758a0f2e088892f743722268d1c6650bfb1b4d8e2e60b4d6e63a97f68759651982be856e5c151742160e901784a2ed666266a78aef569

    • SSDEEP

      12288:0B5nBM7siZXcsxeVjDe+NImEULEUm0DE9nCl10HvmX//Xz4LTda:m5B4VZXceeIuzLE3owCneeXXz4LTda

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks