General
- Target e9fa0d6d3193184666093750de451b2d_JaffaCakes118
- Size 1.5MB
- Sample240409-ph6qsaaa7z
- SHA256 cd39fea18febd4902655c140a7c5628b1efd1f7759c49abb071ec947a9db0661
Score
7/10
Malware Config
Targets
-
- Target lockfolder.exe
- Size 2.3MB
- SHA256 b0b68d448a4e9b7d1963b488a2172225b1df71ec4783054cd7db9a543c249aff
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-
- Target 新云软件.url
- Size 133B
- SHA256 df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
Score1/10