Overview
overview
10Static
static
1037278f8113...18.rar
windows7-x64
137278f8113...18.rar
windows10-2004-x64
1DuoWei.dll
windows7-x64
10DuoWei.dll
windows10-2004-x64
5Providence.exe
windows7-x64
10Providence.exe
windows10-2004-x64
10idix.dll
windows7-x64
3idix.dll
windows10-2004-x64
3请先下�....0.url
windows7-x64
1请先下�....0.url
windows10-2004-x64
1General
-
Target
37278f8113745774640f5b647de0bf7a_JaffaCakes118
-
Size
130KB
-
Sample
241011-2jtttsxgld
-
MD5
37278f8113745774640f5b647de0bf7a
-
SHA1
ec633bb28de73082fc3c08cdca464da47e874471
-
SHA256
e5bb20f9f11465cc01d24f5a9c27d4643af924e8b2a03b0d5e109aa15968944b
-
SHA512
52b2c6f6f2dbfa03c94ff9bb5a2c6ee27341e2f4832540feeff27a0248bae2b5b8cd34dece30c34cc30b53bab9f6d9d44d50081087a10f9f856622781e710ba9
-
SSDEEP
3072:5upCvIDP3BuE84SO5fmDzpHknxq8swJC8PXtCmJrFUU:oMSGFcoHUxq8jJC8YmUU
Behavioral task
behavioral1
Sample
37278f8113745774640f5b647de0bf7a_JaffaCakes118.rar
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
37278f8113745774640f5b647de0bf7a_JaffaCakes118.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
DuoWei.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
DuoWei.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Providence.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Providence.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
idix.dll
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
idix.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
请先下载安装.NETFramework4.0.url
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
请先下载安装.NETFramework4.0.url
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
37278f8113745774640f5b647de0bf7a_JaffaCakes118
-
Size
130KB
-
MD5
37278f8113745774640f5b647de0bf7a
-
SHA1
ec633bb28de73082fc3c08cdca464da47e874471
-
SHA256
e5bb20f9f11465cc01d24f5a9c27d4643af924e8b2a03b0d5e109aa15968944b
-
SHA512
52b2c6f6f2dbfa03c94ff9bb5a2c6ee27341e2f4832540feeff27a0248bae2b5b8cd34dece30c34cc30b53bab9f6d9d44d50081087a10f9f856622781e710ba9
-
SSDEEP
3072:5upCvIDP3BuE84SO5fmDzpHknxq8swJC8PXtCmJrFUU:oMSGFcoHUxq8jJC8YmUU
Score1/10 -
-
-
Target
DuoWei.dll
-
Size
47KB
-
MD5
60339b2958dfbbb4e7de176774a42686
-
SHA1
d1c3ebad814edbc7f2ef59c94568a3c55b1afc71
-
SHA256
46fcbe2aad5dd0e99c7c3a5129f790ba524a2091cc144964fa0ad080854f0982
-
SHA512
6896599d433afd19d42414198b577297d8ea6d6c83748d19b380d2462b2b2259d8129b5da27d374a56591791a2ccd9187e28b6742d6ad996dfd1d047d0a0f010
-
SSDEEP
768:W+gOMd5t6J0ngu4sNT8dEuYD5mXc8kd1cdgaCkctUkijIZVHlG:rLM9Q0g2NT8Fbk3cdgUcmkij+FG
-
Detect Blackmoon payload
-
-
-
Target
Providence.exe
-
Size
142KB
-
MD5
7bd2b37e9639b54aa0648de2719d962b
-
SHA1
b3375ccbf620c16eddf8c9e580abf3e957cf164f
-
SHA256
b224faf3b809d73081b04bcfd75e3abf35ca305a00a6a210de316793887e3b66
-
SHA512
95a385a1f71c482325f7812e89acd407a45cc2228a8ae32bf811276eb9aae71df8d3836c0428d027db7e4d408511fe7174229fcd3db6d45e39df3b02bdb4bfcc
-
SSDEEP
1536:4qbJDBpABpyh0m0GDQhRhnh0R5Q/yRvihL1NC6kvlYqnYZV/3qh+dBp:fJXWyh0m0GDD5Q/yHvqqnYZV/3qh+5
-
Detect Blackmoon payload
-
-
-
Target
idix.dll
-
Size
87KB
-
MD5
ac147ebbabaec4b9262df61984728d27
-
SHA1
dfb93606bf1a0595bc5d2bcdac4fd2e1ac93aa33
-
SHA256
5389e114977175693b51ae5e1581a2e7ef0574f6335e7585de3cbf49cbb3e037
-
SHA512
0ce6edb9f4c051af9150376f4f827ba0282e8c398cc18c6cb0b08b71d23803df30bd0df7681800b54fd67660a165200b009103485d523fd00209ae816bf61d55
-
SSDEEP
1536:FM5TuEZuOXDTRFI1HLFW0knPUk8MpyrpsFMKY7wtvoTrJmccX:FM5TDkE7WrFzYGhsF+7soTrJmcE
Score3/10 -
-
-
Target
请先下载安装.NETFramework4.0.url
-
Size
125B
-
MD5
374406dd2ba710a5613d808b2a46c993
-
SHA1
658f6b5949a2de3637ace14e992980c709b93e30
-
SHA256
9fca81d1e0a27734e63cfcd7450b1a44a60aad6def776737977e5bc6a84bb709
-
SHA512
6cc550319f0e2abbdd644e0a2d44c222e8a585de8f00755faface3f1dcf3a9aa02e3b552d4d63fc0f6bc94d79b02170fbffd7efab7f447547953cbb8075e9b82
Score1/10 -