8775111c174cf65e3200acceb386c3f0471536892d000879acfa675f9bddfb33 | Triage

Sharing

General

Target

ffc1a7d2336e3516f0398862bcb2a125_JaffaCakes118
Size

17KB
Sample

240930-csbl6sxbpb
MD5

ffc1a7d2336e3516f0398862bcb2a125
SHA1

b6878c2ea956757e91fbfa615778805bacbfbdbc
SHA256

8775111c174cf65e3200acceb386c3f0471536892d000879acfa675f9bddfb33
SHA512

7e125de34e01ba6487936f09e2d53a0e5813c168c7c71878e0fb07188a8e7d0bcca3385b532e8b7fe7eae8a3f916f7de28fb2ba453bca0fef63919988a774812
SSDEEP

384:RMptKkx68Y4HDink+rUoY7VOiJJd3D2mupISqv85IPs4P7QP:yt1xtY4HDD+l6VOQybqv85INP7k

Score

5^/10

discovery upx

Malware Config

Targets

- Target
  
  qsllk/LLK.exe
- Size
  
  19KB
- MD5
  
  3aafe197731704f2730a12f83da6f25c
- SHA1
  
  aa7f1d37ec3bf7957ce94b39fbd110f66630fa41
- SHA256
  
  89e9ba86033e02c164746e4948d2361b7df5b594be3fc789409ea2c05dad12f3
- SHA512
  
  bc170a34703b086657715364c78afa9ff63f5a7989b510d073b3fb0c8ce047b3e7779c938d600d702371ba12438cc3eedaa4dabffd342d8ab8fb0ad8daa2e5af
- SSDEEP
  
  384:FCSbYvJ7tZODBi7dNgPwK/RCVNAQuXtv/b0HK15YXqq:gDzIU7DNK/EANXtXb0w5Ya
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  
  qsllk/新云软件.url
- Size
  
  133B
- MD5
  
  4f0017b3b346bd0626f0c3b915e6e734
- SHA1
  
  823bf3ff9e16cd636c9dc0dc690d6a586fcbfe92
- SHA256
  
  df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
- SHA512
  
  0f5eb5024cf6a0323f7998d419995a707c48de917a5899a185369e6acfeb17c09ffa03f7d110adc87b8de20b7d4bf30d50c72479bfb18614d2e21cbe169dc5a6
Score

1^/10
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4