Overview

overview

3

Static

static

3

HSCAN/libmySQL.dll

windows7-x64

3

HSCAN/libmySQL.dll

windows10-2004-x64

3

HSCAN/oncrpc.dll

windows7-x64

3

HSCAN/oncrpc.dll

windows10-2004-x64

3

HSCAN/tools/NTCmd.exe

windows7-x64

1

HSCAN/tools/NTCmd.exe

windows10-2004-x64

3

HSCAN/tool...md.exe

windows7-x64

3

HSCAN/tool...md.exe

windows10-2004-x64

3

HSCAN/tool...19.dll

windows7-x64

3

HSCAN/tool...19.dll

windows10-2004-x64

3

HSCAN/tools/mysql.exe

windows7-x64

3

HSCAN/tools/mysql.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    367f8f17ca1ca78dec101bb41f762abb_JaffaCakes118

  • Size

    514KB

  • Sample

    241011-yek5cavdkp

  • MD5

    367f8f17ca1ca78dec101bb41f762abb

  • SHA1

    629fedc1b143ebcac0d2bab844cafa7abdd520f4

  • SHA256

    e7aa1bed9d02e224cef2358afa7de79401d0ec311c40205cfd95aa70e41df218

  • SHA512

    330328320dd1c8f20f9b3ddfe33400aa9a89e945e52ef0f0d9a1ef3fb33165b94084a411821a1b0819ba02691c516f922cd42ca81686d1a95f26e1be1992cd37

  • SSDEEP

    12288:tJIrDEV6ZnmOZWPUYGcgbJe49wPNu1suQf0+0InFqC/HpVvZ8xE:ovEoZmOYPU9RbJegEUZQf09IcmCxE

Score
3/10
discovery

Malware Config

Targets

    • Target

      HSCAN/libmySQL.dll

    • Size

      228KB

    • MD5

      5c82aa0811d81b4caf189bc70f59d86d

    • SHA1

      33552fda4d682ed39f9408e8bfb3c7fac9ee5659

    • SHA256

      68dd7744114dd579cf5748d0a8e27ac9e7c83ef7fa7245786630ec69a286c090

    • SHA512

      f23a7db670415e1bfd9b6d92ae65f427900696b4aa608ca236025f08f9f7e6ada397403fbb7b26796796edc55f351ea36a53eeb917e30aa80ab16e7fb6b242de

    • SSDEEP

      6144:E2liPBy0LYtmcn7Ce5GfeAHC7Qea/6Dnegz:Flipy0L2mEj5GG3a/Qz

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      HSCAN/oncrpc.dll

    • Size

      68KB

    • MD5

      be32939c3ad523129d84cf35a4f9641d

    • SHA1

      e8f047eed8d4f6d2f5dbaffdd0e6e4a09c5298a2

    • SHA256

      43ad6f6fc581dabc73f5da8ea691281bd0a28a413865dcb353772394a28f3445

    • SHA512

      ed1ecb3d972a44dda3b720a7c4f56418908f83708fa926c39cc2998dd03da26d3c1303241d1288c748027a0db353a0670478093b4f04ce26c2f319e28c900fba

    • SSDEEP

      1536:6QqKkdcFLkqJhmR56ONl24Xf2FCDEt1eGni:7jgq/hOL24XOFyI3i

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      HSCAN/tools/NTCmd.exe

    • Size

      36KB

    • MD5

      4a9509c2d86a6b782df2837506015a3d

    • SHA1

      a3ae8659b9a673aa346a60844208b371f7c05e3c

    • SHA256

      f38cf1ce798e6a12ade9c196356d30ef5c8eadc99e34503644b53774dd9a0590

    • SHA512

      9ead146bf5ae2d372e9d3f73d417f8ac8243c7cccc582c5448cdc77fd43879b728e9fd658769037dafd167f20340554127ea0b6e8f76f48efe6fa905ed1ac5a8

    • SSDEEP

      384:JZKv/OOfkqTBUS04GcGzDml2HBLnoOMamtvFPm06pV1nOrvB6gkyDm73oieVux9c:J4nOOVBUWVfamtvFIdnOrsjyux9o7

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      HSCAN/tools/Sqlcmd.exe

    • Size

      32KB

    • MD5

      bd368d2021f80055e62882768250df92

    • SHA1

      99d56476e539750c599f76391d717c51c4955a33

    • SHA256

      5ceae85b375e516adb38bcfcfe082b3aef76ad18712e2ee7e52acee35c17eb43

    • SHA512

      c40795c456002747dffc774aa1f45a1e1922819d779a2b7595a1158dc56d9fe63658fe6c475a43d26adf79439ef161aa3afa6d13f1032f0f9d082ffb391091a1

    • SSDEEP

      384:Fn7rbyjQT1cSUJhGEhYmlS5eRysypg9qffx3GkAoZo+n:Br2q1c3MEl2pg9qfp3GPo2+

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      HSCAN/tools/cygwinb19.dll

    • Size

      653KB

    • MD5

      d388339d43a0e83c6effd1de09a91c30

    • SHA1

      3988bddacf90569886a2505ec6eef8faf1c61df6

    • SHA256

      61f3bd4efe4de44664eea151202542f058e2e247e28dcea4e5ac810a73d251f4

    • SHA512

      83b61b44c20cabea1b7841d47a156e406f438023bbab4d35a9a90a1bff377da688e18841a39087c06182a2f0d428dd6b82783536ac99936d98f665fc1af3966c

    • SSDEEP

      12288:ZBcweFLCwKDMpvVEiDTf5SUd9aw8s+r53fMyPMh39coCtE:D7twruiDTfT0w8s+93bPwcfy

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      HSCAN/tools/mysql.exe

    • Size

      326KB

    • MD5

      ab9e515e0368d649741859a2dde0d7cf

    • SHA1

      33e3f4bea31df01d67bdadf49b683670fdc04209

    • SHA256

      87adca958b90b161bd0358386fab5834cd34f12af111f09b827fe99c1c48b969

    • SHA512

      9537979bb28cb6449334759a0123e085d43c9e4b9c93b7276570d0e93bec2f463131ecc984a01acc7f483e629ba3958465f1d9fe53bca41658c0cca853c88cc0

    • SSDEEP

      6144:36Cmsj/XggGwiNUwhVM2T0QNAVAUS37bMcdJaVm+jUlASBaKcCP63zA0iZdlv66B:36Cmsj/X8BNUwLM2T0QNAGUS37bMKJyW

    Score
    3/10
    discovery
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks