Overview

overview

6

Static

static

3

AweNauts-5...om.url

windows7-x64

1

AweNauts-5...om.url

windows10-2004-x64

1

AweNauts-5...NG.exe

windows7-x64

5

AweNauts-5...NG.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56ab55ce3fa1134a77445416124f74e4_JaffaCakes118

  • Size

    2.1MB

  • Sample

    241018-lfpspsyhqa

  • MD5

    56ab55ce3fa1134a77445416124f74e4

  • SHA1

    18462fdf54ad2a537f11e2ed4ced9b31eaa4a0ea

  • SHA256

    614c6d81a6afa79c2d3a6210c56c5eab1341671cd6e20090241f5cdc8267ff78

  • SHA512

    d686e46a9513c403729e61e6751ce0caab4699dcb928fc4355d79bc6fe88abc440b500ba46ac9be5c338a89fd8c7c2b672af0412570b512cc664f4081cab23d4

  • SSDEEP

    49152:3CFzRjXgHZvVfeMVwATvvNg2p99B+O753sOVhUz9PSFFkWDtgGl1qc:3Qa5vVWMVwATXN/9ZN1kgnJ

Score
6/10
discovery

Malware Config

Targets

    • Target

      AweNauts-5Tr_20121017/99单机游戏网 99danji.com.url

    • Size

      236B

    • MD5

      24bfc2051aa5f9bdf12b1136f0fd912b

    • SHA1

      196545dd8d571b693209bc4c54f55bb4c40b07b3

    • SHA256

      d798a7a9f358c41325aca0726f8f014fb12aa4b9b038b133ef3f94f5a9f0fa19

    • SHA512

      a433411e77a37f7afbd5a50dad8193b09145294d1b1ef6728c4b899847d4c4db5e2fd3ff6844a2073f6722eb86d639b6973c1ffb99194a191214eef3e4314cf1

    Score
    1/10
    behavioral1behavioral2

    • Target

      AweNauts-5Tr_20121017/AweNauts+5Tr-LNG.exe

    • Size

      2.1MB

    • MD5

      272dddfa9d8a1f3867f1e4ad5117ccad

    • SHA1

      a5cd11ee9dccb24c0432cf7271b342c6b987c38a

    • SHA256

      70ee9a946aed0101784ffac604efa9ce700a498286d8eed659ab81865c1e4618

    • SHA512

      cf81dcd73d4ae7cbdfa0316e23cd1d2dc7e25835a16bc23c1ef232b979513f97c5dc9746f5dbdc64e7160c4ad27e92dbac63e7ee2af2ba6bb517c4ad452e8061

    • SSDEEP

      49152:FP7HRIdqT/TuO2G7g+x5K3umqGpiUfDs54lm/HRHFI27AA:FPzes2wFgujMiUf3lm/HRVAA

    Score
    6/10
    discovery

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks