General

  • Target

    f0d8122964d60edb3a6c396960b2b38d_JaffaCakes118

  • Size

    13.4MB

  • Sample

    240921-3mwm9s1arq

  • MD5

    f0d8122964d60edb3a6c396960b2b38d

  • SHA1

    65ab6401523d273ccc1a7fab2b767548864caa94

  • SHA256

    5795c3501441904304a8e694542e58d143c9f0c82812255b5d7a1b6f469c1491

  • SHA512

    a213cebfdab41f54299fa53fba257cba6cc0d9433625c589312d6d16061172350b1e221c0124379d15cafa2f2edfb22729616e4b2efd5a705ed025e62551cda8

  • SSDEEP

    393216:Sy0Z1UZeIqx/vVrwV9m6nHPYusO9XJywNL8zVSs0okWmmiiCCdp:SPZ+ZeDxnaV0Mz9H8pdtCCdp

Malware Config

Targets

    • Target

      9553下载.htm

    • Size

      861B

    • MD5

      03033cdf475f981a1777c0fef43f8700

    • SHA1

      8ba65dc9adaf9fdcaf86efddc4c626e2cf26668e

    • SHA256

      89439c037b34a0511f794c1f98e8a52a64910dfb8faa93e62522b83a98b327e9

    • SHA512

      edb1b1a710733a2eb236e2d2920884754f88846fac4e6bde1fcf98d719db1211eb9b9f4ee18a560e9a7243b7caabccbe642fb8e02db4fd62c6d7b059717d35f1

    Score
    3/10
    • Target

      Haozhuodao_V3.4.17.417_Beta.exe

    • Size

      13.6MB

    • MD5

      0f6160718324775d1394ccfa4b5eff7a

    • SHA1

      0c221fd655414edc934c9c29c48ca4ae4a45fa18

    • SHA256

      60aedd194ccc5cc9493dc2584c05eca1f86ba1218a31d86c3708726f9092d090

    • SHA512

      45f97108996874fa3dbfdf216769c4c216c2c5991532f523b3b6d0e55684a41ff0e808b68578a8c020a78470bc4851f43281ee052bbeaa4fd8d0a5c77d1b17fe

    • SSDEEP

      196608:nQjYN4uypiR2Go4fmAvh0eIstP/2CtjSzLgNd9Vu/GTXgucG4YqBP2+9AazXv+gL:QjYGuKiAK9eezt/39VTwuy2+HVWO1V1

    Score
    7/10
    • Loads dropped DLL

    • Target

      $APPDATA/HZDP/HZDStat.exe

    • Size

      57KB

    • MD5

      35c6d4f3e82b90d4ee994e56db88e6a7

    • SHA1

      c0973bfb842fa447febe566abf0d5095a143fc3e

    • SHA256

      9117253faa8d3e3dc992c4fa792c2e20a7b2efd2bf83f9ef831e90dcc6854908

    • SHA512

      b08d090e4351ff5fc335a4ab4e51fffff006f0114cc7463b76fe65c5bc37964bd6223ec5bff5a602a08dab0eac78f7d04f0202db2fb2c78860bbb802d68713ab

    • SSDEEP

      1536:MqTHDfqKnxONtQUUUUUcUocboUUUUUUUUUUUrqMFUUUUUUUUUUUUYUoUU1xbPUU3:hTHD5ONiUUUUUcUocboUUUUUUUUUUUrw

    Score
    3/10
    • Target

      $APPDATA/HZDP/HZDunf.exe

    • Size

      742KB

    • MD5

      e2600b9c9732966b53137ae329ba49c3

    • SHA1

      a04129490705077cde1d0ca12d542392251edda3

    • SHA256

      8f670f94f53e2f62e4bb55d3abb09e2f616eb09311dc4bd7d5617f09e814a4f1

    • SHA512

      a3ef95c0e262a7f27e80a5b824eaeaec01d226375aab193bade490170b5c7e042976e74d85386de3b4c058506731ae2deba19bd4ecb77653a69d1ff6c4fa8711

    • SSDEEP

      12288:5OAKLcyUYonmmpDDoeBnD1N+n0t8i5QEg/LtmwPViz0M0sTYQ56+2rNEvE28QorV:5GffmJoUn8L0giISTYQE+2+vP8f4E

    Score
    3/10
    • Target

      $APPDATA/HZDP/sqlite3.dll

    • Size

      359KB

    • MD5

      26606cf164615149ceded6385a318a77

    • SHA1

      e61939e7163f05753a0f60de08909e98ac575e73

    • SHA256

      81692d85c3ae268bdc5c7a46812bf87db1e0a5cc2be3c96604bb028f357a3c8d

    • SHA512

      33ce9c6318bd3a6ebb3e95798ca2949b8f88f4144fd1098f420ccb619ba5aac87f03c713adec1d10e9b47b93e76d3ae54acd1e88e32b3d09856da9b9bf44f620

    • SSDEEP

      6144:YP/j9kxJr2uLy4voueB8Jef2atzCXiKpii8lTtBXI3SvU0rmrwjvDSn5/NKYQAl6:4b9kxI6vXQuXiKQi8lnY36LKVN/6

    Score
    3/10
    • Target

      $PLUGINSDIR/BrandingURL.dll

    • Size

      4KB

    • MD5

      71c46b663baa92ad941388d082af97e7

    • SHA1

      5a9fcce065366a526d75cc5ded9aade7cadd6421

    • SHA256

      bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e

    • SHA512

      5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce

    Score
    3/10
    • Target

      $PLUGINSDIR/GetVersion.dll

    • Size

      5KB

    • MD5

      2e2412281a205ed8d53aafb3ef770a2d

    • SHA1

      3cae4138e8226866236cf34f8fb00dafb0954d97

    • SHA256

      db09adb6e17b6a0b31823802431ff5209018ee8c77a193ac8077e42e5f15fb00

    • SHA512

      6d57249b7e02e1dfed2e297ec35fb375ecf3abc893d68694f4fa5f2e82ec68c129af9cc5ce3dd4025147309c0832a2847b69334138f3d29c5572ff4e1b16f219

    • SSDEEP

      96:E12kx1WhoMHF7ZmIpNkTif0geoBLERrqm1BdROBh6Hx2WsTDBi46AQuP:Xll7A6NkOMiBEReEBdRwiMTDBi46AQu

    Score
    3/10
    • Target

      $PLUGINSDIR/InstallOptions.dll

    • Size

      14KB

    • MD5

      0dc0cc7a6d9db685bf05a7e5f3ea4781

    • SHA1

      5d8b6268eeec9d8d904bc9d988a4b588b392213f

    • SHA256

      8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

    • SHA512

      814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

    • SSDEEP

      192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo

    Score
    3/10
    • Target

      $PLUGINSDIR/System.dll

    • Size

      11KB

    • MD5

      00a0194c20ee912257df53bfe258ee4a

    • SHA1

      d7b4e319bc5119024690dc8230b9cc919b1b86b2

    • SHA256

      dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3

    • SHA512

      3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667

    • SSDEEP

      192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw

    Score
    3/10
    • Target

      $PLUGINSDIR/md5dll.dll

    • Size

      8KB

    • MD5

      a7d710e78711d5ab90e4792763241754

    • SHA1

      f31cecd926c5d497aba163a17b75975ec34beb13

    • SHA256

      9b05dd603f13c196f3f21c43f48834208fed2294f7090fcd1334931014611fb2

    • SHA512

      f0ca2d6f9a8aeac84ef8b051154a041adffc46e3e9aced142e9c7bf5f7272b047e1db421d38cb2d9182d7442bee3dd806618b019ec042a23ae0e71671d2943c0

    • SSDEEP

      96:YV2qpbvYSflug0Dvxn6GuKM9sh1gdrN9+oB7FT9WibOoBZcko5N/:Yt5lugRK8hlvbwkKV

    Score
    3/10
    • Target

      $PLUGINSDIR/processwork.dll

    • Size

      231KB

    • MD5

      0a4fa7a9ba969a805eb0603c7cfe3378

    • SHA1

      0f018a8d5b42c6ce8bf34b4a6422861c327af88c

    • SHA256

      27329ea7002d9ce81c8e28e97a5c761922097b33cedeada4db30d2b9d505007c

    • SHA512

      e13e29712457d5e6351bfd69cba6320795d8b2fd1a047923814f8699f7188ec730ec7f0d946fdff66c8b430fef011415ed045b6ea56e4cc0b1d010171ab88178

    • SSDEEP

      3072:n/93Fm9hfGIGjk1qc55CDoGowH6Fb/CcXwuCoty1IKYOlIa+zUk9sfqQAPfujRzS:/94yj9c55CDorNqot43ndqQpzjIKW

    Score
    3/10
    • Target

      $TEMP/QQPhoneManagerWeb_710061.1028.exe

    • Size

      185KB

    • MD5

      dc031c68643c1f779840ac7305efc551

    • SHA1

      c8fa96e544e096fb899c73429753ef8871588f93

    • SHA256

      71b4f41a39d7f2ea3dd30a08c810a9c4d3a6d0c2914a7de3c093aecf914d8304

    • SHA512

      3e3e1c7abb37bd49718a89619fc373a5704b93e6cec7c6b5b956c135d0fe678b20bed2ba3d93d088ebad3997f666d478eb7983c4218bac90e795eb6477a4731c

    • SSDEEP

      3072:G9UgGOvSzDxz0UG5vcD1Afbgy0d8P7Ph+2up48e/KWzLDH:GkOvSzlzbG5EDygQD8iPDH

    Score
    3/10
    • Target

      $TEMP/SU_lk78_setup_lg0597.exe

    • Size

      648KB

    • MD5

      322911f9d1f42fc32fa4f454ce397fc5

    • SHA1

      225c8eea86b79ab46bafc4bc6e77ee835dd05680

    • SHA256

      85c11981201ed48bf93924b0c747bfde0a3a368fdb8cb938a02da667e653a0a7

    • SHA512

      7c52c8384f13d8b273d1358a96469ff0102a11f60cfa8e79f300c380991eeb4a5e5be91eda3cf5f07ab95ad7366f5425469fe863a1b32fe8f3d689e1dad2bfc8

    • SSDEEP

      12288:ulBPW49JlJW2uTkuIdP2mg/L0YTKIK00DYN/w5ib6mjc0Z:uvPWaJvpuTkthyL0YTtdlN/w5iemfZ

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Target

      $TEMP/setup_3126.exe

    • Size

      56KB

    • MD5

      0ffda624c26e3016ab3a301b95d03413

    • SHA1

      3b69b6568724d95a72e1d620abec87baea37a738

    • SHA256

      772447a79eba10b77b510cc08b6bc01b137a86430e0eefa80cc22ea48f064258

    • SHA512

      d450d61b3f9c6637f862b85cef634fcbc750827846fb60bb67be0700207422f5fe61dd085561083748a1031b46bef145e5092f7d1b15687a3d97ac11c9179c49

    • SSDEEP

      768:K9Maz1kop7Yy4hb+Yin2CEDvcjU9tOmv96vao6DYLvfJzSpL0GFK:KSu1koJgb+L92gYwuwvh7GI

    Score
    3/10
    • Target

      ContextBG.dll

    • Size

      397KB

    • MD5

      bd21095fe72f07e36d76c817496f113a

    • SHA1

      438e389fb0ad76cc7df869c16d8c27f38d705ee1

    • SHA256

      a0cecf910cc4a95fa608b1b68a3c65254edb8ade9cfe5fe8a3eb729581dddbca

    • SHA512

      97ce444d4a35d794e9b774392c9c5f16b71e3c967113853d13672ec30b3e8dae7f8a13834e6821f2456cf3e27d10e7d27790f4d8fb24d293442ceaf7e690ebd9

    • SSDEEP

      6144:gPZKVnhWWLHNSh1SteQ3zddxAwCA6I2XesqcXbBwytwR5GcpjS8L:awjxmMbAwCOAqEHtwPGcE8L

    Score
    3/10
    • Target

      HZDApp.exe

    • Size

      165KB

    • MD5

      1c3d5bd8851c993fc570da59bf5f67de

    • SHA1

      2d8510dc21bf2715fef609844998d3937140f47f

    • SHA256

      2f02ca86d235fcb07877ec46c95ab5a935ec44d7e8c1c9148f3305bef0919412

    • SHA512

      45123039a1c7b282f041164d96278edaa3e0f4357e23fba7be0d7d65799e91b9dec8e6f2085e2876513496118d17b618555032982cc66c23f1e4d1b5d0bdf13c

    • SSDEEP

      3072:E7g1RJZxKaXAklOVxALdh3P06p9YPfFYfXGn779dPNWGi1:E7YRjJlOwRh3P/XYP9YfXqX7Pa

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

cryptonepacker
Score
9/10

behavioral1

discovery
Score
3/10

behavioral2

discovery
Score
3/10

behavioral3

discovery
Score
7/10

behavioral4

discovery
Score
7/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

discovery
Score
3/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

discovery
Score
3/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

discovery
Score
3/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

discovery
Score
3/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
7/10

behavioral26

discovery
Score
7/10

behavioral27

discovery
Score
3/10

behavioral28

discovery
Score
3/10

behavioral29

discovery
Score
3/10

behavioral30

discovery
Score
3/10

behavioral31

discovery
Score
3/10

behavioral32

discovery
Score
3/10