Overview

overview

7

Static

static

7

v2009/IconCreater.exe

windows7-x64

3

v2009/IconCreater.exe

windows10-2004-x64

3

v2009/data/MFC42.dll

windows7-x64

7

v2009/data/MFC42.dll

windows10-2004-x64

7

v2009/data/RPHOQ.dll

windows7-x64

7

v2009/data/RPHOQ.dll

windows10-2004-x64

7

v2009/巨�...��.url

windows7-x64

1

v2009/巨�...��.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b473d41c8a74d3b9d0d0e7441b40efb_JaffaCakes118

  • Size

    2.7MB

  • Sample

    241012-v9sacssfld

  • MD5

    3b473d41c8a74d3b9d0d0e7441b40efb

  • SHA1

    0d908471fa2b44982b390f4c619ae6d8ad4328d4

  • SHA256

    b5bde560cdf02a6a491011f0a367776c666398bf9961cc7f43e655309ed46390

  • SHA512

    8b2aeb88b3fa91c03373827318f8938b24ca8b16428ff7147993d0973f819e93fca44dc16f9f2aa558cea0191a89d77bbbd7a97d9aeeee825a0453dd226ce701

  • SSDEEP

    49152:P1la5Xcg50BhEDY2RbmniONFYdFHWUjYUju:P1kig6/QbmtNFmDjLju

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      v2009/IconCreater.exe

    • Size

      204KB

    • MD5

      c282bd3486c7a66e9e08300b0e89bf4f

    • SHA1

      1bbbf2a89554d369eec4a611448ca9551215c9a4

    • SHA256

      eb0f3c1ca4b324aff3cacac9fa28a10a9e9944509a37f2bc5667ffccc2b03725

    • SHA512

      a8eaf51dcfdf08d3848bab9ca4fcd77830fe11c404865e05ea49ba5e02ce4e34ffbe4db115968d30634a9f0c71b64f09e20cabe1573c769adb21a5a5fa9bb282

    • SSDEEP

      3072:5bq2f3wVFQWcOxC7N7dNwM9UsVivem8lIwEF:Xf3wV67KKN7dNwMysVmO2

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      v2009/data/MFC42.dll

    • Size

      248KB

    • MD5

      e6a8231e861c6d024ad270f1100fb659

    • SHA1

      a67d3aca8283a6917965beb471047093b598d3dc

    • SHA256

      823085ae318bef15d41ec27ffa59144ab320d40ddbdb8f9dbc2083d1b8cbcf26

    • SHA512

      f28527f42aaab435f571117bf543fbb52938e32b791fd1c3adf6bba8777fddd57016bd48ff732fb29d3ec0cf482e388b1eb5ceb18ca890ccae95b9be46ee048d

    • SSDEEP

      6144:p966ec6WLO2LnpUtfTwepMz5W9h7UAZ8:ac/LvjpOfI891Z

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral3behavioral4

    • Target

      v2009/data/RPHOQ.dll

    • Size

      248KB

    • MD5

      e6a8231e861c6d024ad270f1100fb659

    • SHA1

      a67d3aca8283a6917965beb471047093b598d3dc

    • SHA256

      823085ae318bef15d41ec27ffa59144ab320d40ddbdb8f9dbc2083d1b8cbcf26

    • SHA512

      f28527f42aaab435f571117bf543fbb52938e32b791fd1c3adf6bba8777fddd57016bd48ff732fb29d3ec0cf482e388b1eb5ceb18ca890ccae95b9be46ee048d

    • SSDEEP

      6144:p966ec6WLO2LnpUtfTwepMz5W9h7UAZ8:ac/LvjpOfI891Z

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral5behavioral6

    • Target

      v2009/巨商自動跑商巨商自動消工外掛.url

    • Size

      178B

    • MD5

      086b603b7de61e8ccd1c92f773329975

    • SHA1

      9dc93a59694ae980a670f856194d14248cdeca3e

    • SHA256

      cab7ff8749eadb83fb24738c67981fc0d3b5ef2d4e16285b0d7c696b974208e2

    • SHA512

      43fb8f3aa852aac50b9126e7f93b5d00cb8c6fe8e8b79c249ac90e713444acd7e796899c28468473e34fc5cb7b6e2f91bf205df465dcfb6c8b304b3a4e28754c

    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks