a4aaa4806eba5206d1077536c422c025dbc9c44f0bd2530f9184382798033cb9

General

Target
yinghu.zip
Size 555KB
Sample260723-j9vvpsgl41
SHA256 a4aaa4806eba5206d1077536c422c025dbc9c44f0bd2530f9184382798033cb9
MD5 393b539095dc227f4700d6331840e271
SHA1 0fd1f8b595ce202c9d0c6bf90e0bf7279182403d
SHA512 f01be9cd60fce769f042117bda4ed0c1a8ae673548a7bc339bc3c3054f7c716391d735d00bbe101de0d527f9fd6208c63468add54cc16daf244aec8c25efb8b9
SSDEEP 12288:QuNG4PXyq98znhbfHQpa7h10JwbkgzK4c6cfrYR6wy8c0n:QKhhqhbF1BbjKVlYAwyY
TLSH
T143C423494825E5E9CF0F34FA86B2249A73171593AAAECD83FC706E906F84EC27C5C1D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

execution

Malware Config

Targets

- Target
  yinghu.zip
- Size 555KB
- SHA256 a4aaa4806eba5206d1077536c422c025dbc9c44f0bd2530f9184382798033cb9
- MD5 393b539095dc227f4700d6331840e271
- SHA1 0fd1f8b595ce202c9d0c6bf90e0bf7279182403d
- SHA512 f01be9cd60fce769f042117bda4ed0c1a8ae673548a7bc339bc3c3054f7c716391d735d00bbe101de0d527f9fd6208c63468add54cc16daf244aec8c25efb8b9
- SSDEEP 12288:QuNG4PXyq98znhbfHQpa7h10JwbkgzK4c6cfrYR6wy8c0n:QKhhqhbF1BbjKVlYAwyY
- TLSH
  T143C423494825E5E9CF0F34FA86B2249A73171593AAAECD83FC706E906F84EC27C5C1D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  sandbox_package/Gj6058Wc.exe
- Size 603KB
- SHA256 9bbf0e165d32f178e9c5c5ca972a18494f546f89437f32e6f327b9e7b4eb63e3
- MD5 c9f234656cc0854941d94464a097353b
- SHA1 518efd50f22635797c8ae052510d2a687376caae
- SHA512 3bfa4ae00adc94e1bc05561a31e3ab281e4733f7f951411b348cf40c481ed885dd2c4475a17e6f2baba1332e8d312e27392b612264033cbf8fcfe5a9344d9463
- SSDEEP 12288:g8e05qFxcSrtoUTbq9x7+OzJJWxdq70+skYwEUAGTmZbcmKoyReDF02qAHUywA7m:gF0uxcSrtoUTbq9x7+OzJJWxdq70+skZ
- TLSH
  T16DD4395AA2A840E0E1BAD57C8B56D94AE7723C160760E6CF126407536F27BF46F7F320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  sandbox_package/README.md
- Size 281KB
- SHA256 f6de046f36978e55214983ca701a55de0e4b17a9cfe3ac1598e9bb5fb5e8c095
- MD5 f616f927ecc13f18915b4deed330f2d9
- SHA1 3c8e3c41a8671e4e3d5048c9596260793d029688
- SHA512 447695e916e342fd7e2bc0877eda51819ea225cc5b5c21ffc8e7e9b40d01ebb91f5be0f89919f4505d2e19e12fb7dafa6b205e43a4acf96ba04e558a83174134
- SSDEEP 6144:TuMKm6UXJ3R2GCgCAqDyJYfF/SZ48hzeMtHzfzzQ9gXKB:Tu/GCPXyqf8ZnhtfHQOaB
- TLSH
  T16354236DCC20F8EE8F5BB872459111E9B72726635D6F9BA3FC702D507CC0E82A4682C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral3
- Target
  sandbox_package/View.conf
- Size 510B
- SHA256 61bae94464e4ffcc49232d7f6ea3885567d6fd0d6ce4fccde5a4486e0a5f4f47
- MD5 be638c68f2917a4bf60dc2eb4f3cb188
- SHA1 d96b559252740247653d2bd22dc1fb3e813ebe02
- SHA512 fab8432d98fbd68d67259c909e5646b05542e7a48f0ef3e6994550f4abf3127799cbcce81764971a11a04b17db92037eded52196598c3615a179fadd00a0d9dc
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral4
- Target
  sandbox_package/deploy.bat
- Size 946B
- SHA256 1558688b8adcc80f92bcd242bbe9600ac77e9845a2b8db2ac4e706d25af5a64b
- MD5 635b069c3d2a6f54425a62e6e3cdd687
- SHA1 d74ca221d7d5befc7f85c889d3a340c662a15940
- SHA512 ef6c12e9ad426473883a9f694ecf526d140ede6c195f14077a37cc1708a67a53693035792b91201d7ec65932975acbab23ad9bfe81b81757872f4fdac1f8f3f5
- TLSH
  T19711BAE335881EB2739889408D0C285AB022884F46E09DD4BCDF90B63FC98C067FC289
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5
- Target
  sandbox_package/libcef.dll.bz2
- Size 18KB
- SHA256 094524a0c3d3884436377f51b37ae529747207baf4ec3b67e5bb352e7e69dfbd
- MD5 69d5102defc1fd1b10d83c67fa35fa24
- SHA1 389303283c9f81c9548a770ca14e4f0c5df172b6
- SHA512 bdb661738f500d968fcb0f2bd4f14219c705dc19eafca28231804b87a03f803a59bf2db24932a2f1f5c9652202c757fd9fa8eb2481a8dacd7c4dad055388d478
- SSDEEP 384:XKEPDFrNwBR2jnm6wXNS59ikeGAOVI1YgWub4K6TxE:6EPoH27ENo9isAT1YfuMxE
- TLSH
  T1F882CF7632468173D071E82606B7A73E19F32C43E1499BFCBE48BC4614756F33B688A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral6
- Target
  libcef.dll
- Size 512.1MB
- SHA256 a6e59d87b7a349e14c2ee6d313937a93fd3a46546783e226dd3829e9e027e3b5
- MD5 ee8848acb44a986f4b0450a75e413d4b
- SHA1 93ac5795c6e8d6d9a16b390c36bf79e10422d2cc
- SHA512 909cabb3d3632bf3410127dbd70dd93b0d4e85a5b0bba75bbc6b52186e9cd2fdcfd39068f233a76c10bc20646efdebe25756202f5dec8322aa8f76115314465a
- SSDEEP 768:/6jQbjmiuemG2obYXGT/owdbgOKsaheKNvif5yL7tUHtSO:SjQY1BXGG9iyBC
- TLSH
  T129496F855523E47ECF06C3B66A67ED397D9DE5270060AE370430CE7C8DA7B482929C78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1

T1059

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7