General
-
Target
82a384ffbd60ae77a7c194097fe94e00_JaffaCakes118
-
Size
392KB
-
Sample
241031-lsa53strbt
-
MD5
82a384ffbd60ae77a7c194097fe94e00
-
SHA1
276bb9a5963813e64e1f3766b05af8683f18724f
-
SHA256
8bc4b6bc5c2f71661aae481fb46d167ab6a3896c5b8c4904ce420ea3a869bbe9
-
SHA512
e4c593a016988827283279958913ebb39df7670a0d3ccb9e279f644025eefd6b1eef315ff84a269bfee36c2284389bb2b2e155209fe712997f6c25e7693f5fe0
-
SSDEEP
6144:+BrpolTsiKQ2HHl6bUKPBRwta3YYRDRtVJ8FgRmbcbG2w/OplJdauttu4K:IrtXnl61BYeDRtz84AcbBlPO/
Static task
static1
Behavioral task
behavioral1
Sample
aydsgj/阿勇定时自动关机器/Ayong shutdown.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
aydsgj/阿勇定时自动关机器/Ayong shutdown.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
aydsgj/阿勇定时自动关机器/注册机.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
aydsgj/阿勇定时自动关机器/注册机.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
aydsgj/阿勇定时自动关机器/Ayong shutdown.exe
-
Size
905KB
-
MD5
eb8b55077a70707bf03745fe1717b6ff
-
SHA1
e0f8f035a0921b30ea18ea8ce46155ffccb1d444
-
SHA256
393bec8b7a46d67fe930427242027e09ccf2f001fc067fe5ebdf2d21244a685f
-
SHA512
d0a05bbcd6ca914f295f87042b4c3e7b4e95de8fdf1cd9863de07c1596a7c06aa5e9b6e4bbf7e15d2a4addf11290456fc67781e3f8d8c63f3ae9e876bf5b7330
-
SSDEEP
12288:a6ljePZsf711yc8yxTSidulFmiVqhkTx6USPIFP1V1W/M3rRlr7cjxE2j3LVDXEn:vjrT1Mc8yxndgrYK88dlFTa
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
-
-
Target
aydsgj/阿勇定时自动关机器/注册机.exe
-
Size
18KB
-
MD5
846e5479a103c797147b78686e1d77eb
-
SHA1
d0695211b05b9eda62d6c69bdb0677c46d26e554
-
SHA256
f5054ca4b39948d5cbf2d7d83ccfd3a20f2937d2fce3e160f219cb300a3ad535
-
SHA512
49efbd48505b2f883ee1fc1ec4d46eae20562530de7f57fbc2122e318aab21402c06dae7b67bff26135d8ddd332f20a0138ce036ba6e6dd420efb0ff7bec566a
-
SSDEEP
384:bQ00crMPJYnnFMCKe9L628JaPyYXn8b39z9vR:000cAP6nKkL63kE9z9v
Score3/10 -