Overview

overview

5

Static

static

5

暴雨在�...��.url

windows7-x64

1

暴雨在�...��.url

windows10-2004-x64

1

暴雨在�...il.exe

windows7-x64

5

暴雨在�...il.exe

windows10-2004-x64

5

暴雨在�...LL.dll

windows7-x64

3

暴雨在�...LL.dll

windows10-2004-x64

3

暴雨在�...TL.dll

windows7-x64

3

暴雨在�...TL.dll

windows10-2004-x64

暴雨在�...lp.doc

windows7-x64

4

暴雨在�...lp.doc

windows10-2004-x64

1

暴雨在�...��.exe

windows7-x64

3

暴雨在�...��.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    166d5aaf3a945ff1e66b346cc8b5bd05_JaffaCakes118

  • Size

    424KB

  • Sample

    241005-gmmjpsygmq

  • MD5

    166d5aaf3a945ff1e66b346cc8b5bd05

  • SHA1

    19c54962476165220d26c8ff3feb0db99fcbc551

  • SHA256

    6904064da47534db4e7704a78d79aaffaed85c517ec9d47d7cdaf7f27b9dc4e4

  • SHA512

    beda666bd3399108ce66abf5b7f3ae2002a91857e501096d2af7522f84c93e06cfe7071a548cb0ad5b81de30612e0a4857ebf7a1bcf04531e21cb99946da8311

  • SSDEEP

    12288:geVc/REdrF2hNqkfQFWRdB+bgVAV1nlT/:qA2HqixVAV1lj

Score
5/10
discoveryupx

Malware Config

Targets

    • Target

      暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/!创e下载┆绿色软件天堂.URL

    • Size

      340B

    • MD5

      a22b6494598d6542ab9a8c781a9f3543

    • SHA1

      72d3275d1a83c8571a58e04dc9d65a6bb9da3406

    • SHA256

      98ac277133004e6f0b708847bc7acdfe5df3fba5ba6d1713b64417ee324b6729

    • SHA512

      84d5da2796cf9af8a75c80ee7e764f45ea81de4b5261e4c88e7f65c942c3e349cb303fdf98419de02c3ff5ae6f6ec91eb5ae124b76d3751390127b931dbfe7be

    Score
    1/10
    behavioral1behavioral2

    • Target

      暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/GetQQMail.exe

    • Size

      30KB

    • MD5

      6203fe78d89a26e3a7c16daad0cc6dfd

    • SHA1

      25bbe767d25adb8a0c4d44063014605ee7f30b1c

    • SHA256

      542e1cedc22a3b1099594dd843a9dc74cdf3ecc3c07cf3027c781bcc8c19cd8d

    • SHA512

      36ea92db362af186faf410d4736b94cd6a795fa84d30ceaf154a887083187ff0646549294f8e5d8230b8e870bb5503f67eb8dbcd94f29ec72069fce285702d36

    • SSDEEP

      384:ERgaAXnPwbjWOiheygh7e2ojCa44d19LFDOT4LvtYNw2v1+:rvXnP/OfyghM+/4PcOtYNwA

    Score
    5/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

    • Target

      暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/SendMailDLL.dll

    • Size

      52KB

    • MD5

      0c7db6da4f32e339c7ae36561337c8b5

    • SHA1

      0a9b1f67ea0575d684ce415aaf61e8fdb3f047bb

    • SHA256

      b3749b6831251fa335400484fc145b67c935ac949deffb924bf1c048c4dab3ea

    • SHA512

      3b36c2a536497d7dfd969db1c8fd66f7c87f44cef21b81e588e10d9a3ecee26589ea840c2253596be51a5869604335f8fe77ce8dc6d594a120e14d254f28491d

    • SSDEEP

      768:GKweNnBLBvrexA0TnYFe9ZCBo8p3aytgO9STIgzOMd1A8GhwgUo:GKweBuxA0Tna8ZMo8paBOwTIgR82o

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/SkinPPWTL.dll

    • Size

      536KB

    • MD5

      17caf7e01db0454c991438d3dfd7cde9

    • SHA1

      732c509dcfdc50b8313e8cfaf5098a47404d0440

    • SHA256

      bc0bd7f0f051682f5ca2a301f7445600778060e3ac70242ce05d3abe9c411ac2

    • SHA512

      75b11686b2e58f60c8ac4c55c7af3cfb9da754cbf096c0f955a553ede15f1cf19d19229793f6af30dc19dab9321cb81a23fd2fed65fd98c405831d88b085c53d

    • SSDEEP

      12288:5Sdwc0WlMlJLXqxYUBpmywL8zULCgLfpByYVq6:gqcPMl1UBpmywL8wCgTpByYVq6

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/help.doc

    • Size

      187KB

    • MD5

      67f56ed09f9d01a6e5d20991e4b2f3e8

    • SHA1

      562e2f03d55176e1a9cab26cbc91e374791256db

    • SHA256

      35484a2868743a35f173b5c47ca93129fdba3c0cca7f8b44442cfc43ace477ea

    • SHA512

      1b594d264d92b99ddd7ff88b7fa5bdaa45e0db4a8c28b995d724c08da25aaa735ce5bab0d7dd0a4362f542227b38836074d3bb25f1b350c193157eee6ce34d02

    • SSDEEP

      3072:OLsek1pROnrhyF44QfqXp+JS3O1LKMInQjzat/5SbvE3gSEFW7MLmz/30HvbDDDB:OLsek1pROnrhyF44ys+JS3O0v6e/kbv4

    Score
    4/10
    discovery
    behavioral10behavioral9

    • Target

      暴雨在线QQ搜索2009/暴雨在线QQ搜索注册版/破解补丁.exe

    • Size

      26KB

    • MD5

      ddfad15fa2979c0fb19d40c1dcacccea

    • SHA1

      afdc6a3ccd605e7922d2914c5d4bc35c7d34ab4c

    • SHA256

      bf1556f50e1743894dddd3e994e44a45227f109d2c1a8ab61355e080f81d0eaf

    • SHA512

      e072e3147b79aa47f8f675cd178adf3ff9ee0836520a4b69f5911bb73c30f8128135189f17d8bb2fed6320480dc04b0afca4831f8d586d876330808cae12b68c

    • SSDEEP

      384:B81mOgYs/sTEs3E/Ds6CKZ1+i6PqXfSNCofIiU++bracTHoJBnPq3FtnEHzC:6me0bs6Z8i6SPJbWcTmPq37EHzC

    Score
    3/10
    discovery
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks