98541b761b973363cc71d9a80305abcf7e36d43f9cea157fe8487259c85e6d5d | Triage

Sharing

General

Target

13d0068eae668a5f7e7fe67b18bfd893_JaffaCakes118
Size

10.2MB
Sample

241004-r91pysthkg
MD5

13d0068eae668a5f7e7fe67b18bfd893
SHA1

b628570ba551546d28a1064055913a7989bab9dd
SHA256

98541b761b973363cc71d9a80305abcf7e36d43f9cea157fe8487259c85e6d5d
SHA512

8e9669043580aab7343c0cb188efd59e1a23ffe7cc32cbb6c79a79facd77244dea82c2faceb8826baf26b9c07c1796e2c512b9b06cd686a9d27b338d953c8caf
SSDEEP

196608:ti/4RcsjzOMEsy30WTLrT/NyTpR9Wkz9X2z1DZM7x54JLjUenLc9YpLQ:UAiseMEsy1TLrT/QpzL67FR49IE

Score

6^/10

discovery javascript link pdf

Malware Config

Targets

- Target
  
  IT猫扑网.url
- Size
  
  334B
- MD5
  
  5330643607621baa04ef017b84f45bd1
- SHA1
  
  5a3624c64dac53266cc91df2885cf3ed9d517870
- SHA256
  
  d21129ce261839f7e84277ae3530ac147f1293d5d027a7cb1f4c6d5d85edcc49
- SHA512
  
  476f324ce44be3e72fa11ff8af3d13e37ac21bc29e57b7ecddf1e0bb8cd9596a9011bcbdebb0869c2ff89726b127d8e94950598b8c9b50a005e3535da9138240
Score

1^/10
behavioral1 behavioral2
- Target
  
  IT猫扑网_百度搜索.url
- Size
  
  392B
- MD5
  
  2c76b971ac9d6834deb20afe958c3094
- SHA1
  
  85784473713fe2b371a9042e23b730660d2197b6
- SHA256
  
  1579dcda6f1bc3d32f494c24482fcb222262f616575925cdd1fb4204216489cc
- SHA512
  
  707b665b1b31fa3369c12c0187ff4a198a51cbaccd0ec546b8df775516239b1afebaff9bd81cd8f503d8375cacb7ac5e2cbf180db3e0f532f7187308d1bab362
Score

1^/10
behavioral3 behavioral4
- Target
  
  PS_KPT7/KPT7/JPEGLIB.DLL
- Size
  
  110KB
- MD5
  
  cd4e34755266f436b731d56f739478b9
- SHA1
  
  d1012780b51ce169033cbda3338e783259be2979
- SHA256
  
  10a8ed13051a68bd399a422e2fc0900a6b7cae20b0c8a7c93eb5a7dc9e71ed70
- SHA512
  
  92f2262d0c22fbdd18a54a6a016a70a224ee60ee6d18bd738324ce919a6941c439edb2ac7327f34082a35a68142fb0afd453477a9b6aa3faf3e087813e2bb715
- SSDEEP
  
  1536:wYbaQyljaAo7j4uAu67OqDMBgGYarVaCwN/qz3AkPCc7KutZqb0J0sCNv5h:wYGQxHuYadJqt59b0sCh
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  PS_KPT7/KPT7/KPT Channel Surfing.8bf
- Size
  
  24KB
- MD5
  
  289aa96630d3fc5f3ac2fa89fd976ccd
- SHA1
  
  61b96c19b4f9b166da31245d24f0dc452beda1be
- SHA256
  
  2fa9051e0de746a643b14b6dfef70744a78f369f94144b5517b2bb4817c95eb2
- SHA512
  
  6c81e80ff8ba95748b200cec839f74d09ff26adc075d823e955bd2d156e1073b5ce8b4c7444267effa4c4f478eaf393944706817d58531b739d0caac62506ba1
- SSDEEP
  
  96:Z23Ci3K0C2QK3qw8WH3di1W/bZpqh0KlBVTYa2ySDp:0SKK2QY8WY6oh1BSyS
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  PS_KPT7/KPT7/KPT Channel Surfing_c.mcm
- Size
  
  56KB
- MD5
  
  3cefbdda9864dff040210ea68dcc69fb
- SHA1
  
  eba5af8b48064a4fb5b0f64bc95968f4a16ff63b
- SHA256
  
  8222aac9879222679f264e32f899271f7eca6347253f638347610ca4f406a673
- SHA512
  
  be2de8022d9d12c754694f18ab6c4ac9f153607209467a5159237bf6ce34aca4c85ab62f0056136e82fdaeb77dc6b306ab418e3104f9510cad2a6dd68e7dac0d
- SSDEEP
  
  1536:bLMjCq6JMIUUYc9ZK9XxDjsCdrLcvh+V7cNAj1r3OTzOpi7O:06JMII0TTzOk7
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  PS_KPT7/KPT7/KPT Channel Surfing_ce.mcm
- Size
  
  60KB
- MD5
  
  caca2f4a332c8f839402126d4c650810
- SHA1
  
  d2da6f36ef9d039db41eba31a3dedc524f565f64
- SHA256
  
  325d09281b3ca6a52ca993641882b073b166f5167dc3899e26abddc284a0ea7b
- SHA512
  
  5bf28963045f1cd5d24ac270cc43279246d20015c8cafad2a0b08be92173343f57fe81683e74ec25adf887c63ec4cfdc712c38d7cd13ebad0ff771269f7c2567
- SSDEEP
  
  768:QryjfZBGADRhl1e4o7npAYIeMGngwnt86vrUCiyLe:0KfZbDTl1eUGttzzbiwe
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  
  PS_KPT7/KPT7/KPT Fluid.8bf
- Size
  
  24KB
- MD5
  
  cee4e4cd9b26c8958b9c0a048810e896
- SHA1
  
  49537709c074c3fce69501462bc85e4a4163e3ce
- SHA256
  
  b2cc33e8726f4cf8d1aa8d0dd58591c7747f1c27a69a2ceb80bce0b81acca7be
- SHA512
  
  33843da7682413d71d32ecfe5a9ea43620eccabed33c14fa87ff2a89fb9aaab9cde42ce3fe804609ab0a763739109be3dea64064abfc2d96dcc96788886c4868
- SSDEEP
  
  48:SOguKou0PKS5Nn30ld7+0tA8dNKtKjDIDw8WH3v8ki1hGBATRIH4mT/augubUo:Zcii3K0C2QK3qw8WH3vm1hGBK8ySbp
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  
  PS_KPT7/KPT7/KPT Fluid_c.mcm
- Size
  
  100KB
- MD5
  
  ccd4b3c4dd47695c1f09c46eccddcc2e
- SHA1
  
  88ca0ec56eceecf3aebe81eb31dcd5348c5d4a9d
- SHA256
  
  b0a202e2098b4c3aa6f1a5193073a47c9710059de6c2c667533396029a6830f8
- SHA512
  
  039361b18d3442015b765339151160856c75b95385fd3c0a5dfecaafd826837157039d25b770e38aa1b82cbf626f1eac1cd7410e542792a30710b1bb84e0a173
- SSDEEP
  
  1536:ZBj5PjLk2KwhnF9u44NyysAcCFocBqqbkEjzV4051/ikI3PAl2jsB7FYUfxlwcv:lPjBaWgBqbaG0D/XI/ABtmsWmfDuV
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  
  PS_KPT7/KPT7/KPT Fluid_ce.mcm
- Size
  
  48KB
- MD5
  
  123dd011d73e86005b124ce85361b022
- SHA1
  
  771e921154605781d13aee25c3ff79c7a8b88c40
- SHA256
  
  99f066ffcd16f7d5f36e3db419ad6b125bdd0f8d81f545129b4b78c4d3a35abe
- SHA512
  
  e25d0e2bf7b7106f7856e8f58614ec69028589014e16ce731918af1df7bd69ae9111c745ef1320f731d522efd4f2111a75273b48829e361ae9adb6d27a64af78
- SSDEEP
  
  384:V6brED9aaW1D/+xr4F/Qog4CzlbvPnOPrJ+lwqNvweSvXCAtGumfpSq5Y9r35Wyb:Vp9RaYS/QomzR9eqNIeCyAb+053Yy+I
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  
  PS_KPT7/KPT7/KPT FraxFlameII.8bf
- Size
  
  24KB
- MD5
  
  33d1ad1309f233e83cb9e9e93eadadac
- SHA1
  
  44881f02b609e5647e06644c0b5d11bd4d35fe28
- SHA256
  
  4ca2001ab8d67f3614c4d45859772a7a641faf2602707823ab9415b6e3c7e7e7
- SHA512
  
  ea4fa47c9b7a2918594dddf567abf7e685f7fa598f448295872b0f6d4817ca399df8ddf5f573e666bb1d75abeb05624523e8e787b64c35f5bf58bf8ac1f12d94
- SSDEEP
  
  96:Zlai3K0C2QK3qw8WH3igtgtJchHHhCgKsySfp:iKK2QY8WScgfchnhCgdyS
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  
  PS_KPT7/KPT7/KPT FraxFlameII_c.mcm
- Size
  
  92KB
- MD5
  
  718bf42d37df9bd03c79c83062f81814
- SHA1
  
  d8fd5c22adba074630ea6f8d69ff5cbad32f37ed
- SHA256
  
  de2d991eaf90ad50c480629719488426c7837ce948c1ef10e8403c5e903d8395
- SHA512
  
  acbff95d7cb9546029dd007a6c310cc20524cd14fbca13a94afd80bf23794b41b1942b832ad5b3a46babb30116516dc011cbf67cd446f4cba3682a1bb537a42b
- SSDEEP
  
  1536:22zG43vBrEgX5xPaWpQVfuLV40IR7lkGjiYk6RNRjUfwlwcvh+V7c4C9G/41r3XO:2CHBrBjfVfIR7lVE6ScG/oNw
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  
  PS_KPT7/KPT7/KPT FraxFlameII_ce.mcm
- Size
  
  120KB
- MD5
  
  0efd17e757a617c2a46e54989d359da9
- SHA1
  
  24550559af9518afad0d5fbd4b7d4ac10471c473
- SHA256
  
  18bd6b9610b79ecbd288fe115c5b15d682034e5b9063d6e50574b8e58016acef
- SHA512
  
  c70fa53fdec09b8456f65684995aaf94bb54435e72237214cdae5977eed9619583de6542ddbc63bd0dddd20b94720723489c0c34938e785321ff985bc4415700
- SSDEEP
  
  3072:F12euQ+jCTJH7FqwNHDhpDgmQb7Qw1zO:rtr+etbYwNHDhxshz
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  
  PS_KPT7/KPT7/KPT GradientLab.8bf
- Size
  
  24KB
- MD5
  
  fea279a36d29c361cff18c745c9a489e
- SHA1
  
  409c6bd3fd9061721ea886bd7151b5360139e87f
- SHA256
  
  75b9354f77a2ced933ac2a4b62ba51e638590df8e46d2ff0883a9b82970a13dc
- SHA512
  
  5d7d79af471e0b812145a764fab7bde023dcc8003747544d64b1bc4f8663b5654a8714e137e68f934e7d37946c00d41cc5f5dbdd037731be6b7437ae78a09f0a
- SSDEEP
  
  96:Zvai3K0C2QK3qw8WH3/Ucch0sB8ycySHp:YKK2QY8WvUcchHBGyS
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  
  PS_KPT7/KPT7/KPT GradientLab_c.mcm
- Size
  
  156KB
- MD5
  
  64f8ecbe076db866ffef915b993ada87
- SHA1
  
  f7a2ea0dee877dec40b62d809ca92f74af083d9a
- SHA256
  
  1e70b2599a26051c3f6788740dd770201efba7f258ad5a676535d88e93f711b8
- SHA512
  
  5c981fe99c9e5fc9d65d8c333ab4785b7ede6b0089c6244b6c07550b04cddfb2db34e7bdc45429e93185aaf02105f0122dbf196c88923530204f5826850eb2ff
- SSDEEP
  
  1536:fRsbxxCgdK5AR5FGY3JJb4YwQXvKN6xzVbBqyJEajOI0e3iYzYx4p5FC0gvG0NEj:fujCmKOXvKN2zVbrJRV5Fad7vTkvOUX
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  
  PS_KPT7/KPT7/KPT GradientLab_ce.mcm
- Size
  
  92KB
- MD5
  
  2da2b78fe4b23ec035c1a0f882829f12
- SHA1
  
  b9596dd209eb4e8d3f55ddd35cb8630fcf235c86
- SHA256
  
  097f8b513b74386f1ddbb6e6412b5b5f24773567695f2583f6edb0878e3234d7
- SHA512
  
  f9cce375a5baa71897884f4583766d96aa2c90c9b5e0a6897fb69157eebceeca7a5199b7661ba0775f1f7995dbdc4a5f2aef2191230ae8b127bedc3000610c9a
- SSDEEP
  
  1536:8snL7OlfkYyO+v1i6pGJk7WF4RZu+uVUeevlzRmjUc:fOlfkY0v1JsVUeevmjUc
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  
  PS_KPT7/KPT7/KPT Hyper Tiling.8bf
- Size
  
  24KB
- MD5
  
  69d75d6de50822e091bab421f7385fe8
- SHA1
  
  af85bea23ba12bc2657e3b9371c54407b40f22fb
- SHA256
  
  49e70ef571e8f7dc9029736bad3e5472d9555da87ddfd067b3d189123b1e22d4
- SHA512
  
  c7f28bc19009281e0a9b07e1d733fa83b78f80f96a6f34b93c766ec5c8d21da6d30a420bd802ff6b069c4b44b7780079bef52de9cf5ff8cb0a41c6a3ff380a4e
- SSDEEP
  
  96:ZXCi3K0C2QK3qw8WH3Xm5NF1QpochpHeB78ySgp:QKK2QY8WmMSchoBwyS
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pdflinkjavascript

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32