General
-
Target
084de9e4383bc9247c733faded7c54e6_JaffaCakes118
-
Size
2.2MB
-
Sample
241002-b5gtaa1dkp
-
MD5
084de9e4383bc9247c733faded7c54e6
-
SHA1
ecfcca63515dfca568dc6fc42de4fe3000eb7503
-
SHA256
442c0032f357020f95d9587d85d1983f838e53475b18c79b61b76f790ff9d12a
-
SHA512
9b6a216bff29dad37c5e9d4130abff052ee36c64d3d2e4b17122ca57469b98b51a15fa83cfcd6e7639e43109d73559688116ce2966ea4183981c929f03681dd3
-
SSDEEP
49152:JM/uGwjz0keUJkGsD8H1vm+IK85qDnmQu2XUbK/fqz38FDHf6D:JQubSUJkG7Vvm+Juqb9u2XaK3qr4+D
Static task
static1
Behavioral task
behavioral1
Sample
ALI213-SaintsRIV.11Tr.LNG.v1.0/SaintsRIV+11Tr-LNG_v1.0.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ALI213-SaintsRIV.11Tr.LNG.v1.0/SaintsRIV+11Tr-LNG_v1.0.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Readme-说明.html
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Readme-说明.html
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ALI213-SaintsRIV.11Tr.LNG.v1.0/SaintsRIV+11Tr-LNG_v1.0.exe
-
Size
2.3MB
-
MD5
4f4221f2347f1abe30b43d09c9167f28
-
SHA1
e8b655e979d532cfb8fa88bd0cb210aca6bc6a01
-
SHA256
5ccae25f0a50a8ea380dfadfbbf2f54c13b30ac41eb9d12635898295cd3d93f5
-
SHA512
ffb69f7c82d2306f894cde79cc50588b45a6fd8b33ea2b745c734ed458c8b5809b31f71e19c5bed6270a92e0429e7975a22d61927919720518d9605788424e5b
-
SSDEEP
49152:A/1P5hTnpAWDM2MMMAIwC+TaMFsjeZdtVON7Rapv98Ct2U7CcKNpi+3Sq:A/1RLAWDMbMMF9+TaMFsjKdHObKqCcP9
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
-
-
Target
Readme-说明.html
-
Size
777B
-
MD5
c958a387bcb4d4c4c36ed2dec01184e0
-
SHA1
910f0ed80eed8c34967b4c888fed20f776436fbb
-
SHA256
f99a90d3cb21afed0ad2fccc9bac2829d4f3ad8ef9041cca405117398c43c57d
-
SHA512
ee2a93c89c3474cd112d3585b1ba1d6d0cd48982562da0033d2570f2def91e1daa2ff83d41a6c1731c4595264f79be12ff596d76e2130e88051d268dc0ed99d4
Score3/10 -