Overview

overview

7

Static

static

7

Ancer-v3.5...er.exe

windows7-x64

7

Ancer-v3.5...er.exe

windows10-2004-x64

7

Ancer-v3.5...al.dll

windows7-x64

7

Ancer-v3.5...al.dll

windows10-2004-x64

7

Ancer-v3.5...lp.chm

windows7-x64

1

Ancer-v3.5...lp.chm

windows10-2004-x64

1

Ancer-v3.5...ic.dll

windows7-x64

1

Ancer-v3.5...ic.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    a34f01e6341149e7e5ebe2d7cd9ca3ad_JaffaCakes118
  • Size 865KB
  • Sample240613-bj59raydlc
  • SHA256 53563fbd91f64957c81e813d206a6afc7224cc8d391e5b982231afe0aa49b79c
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target
      Ancer-v3.5/Ancer/Ancer.exe
    • Size 175KB
    • SHA256 377225c63b8cb3484fe49aa88b5d4cd875de7c98b834841d26a0d0aeb43c9246
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2
    • Target
      Ancer-v3.5/Ancer/DiskSerial.dll
    • Size 26KB
    • SHA256 d6f8bb4a50eff9e4ef066f98756aef8a9d6915d3a485f48b2049102a59753b7a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4
    • Target
      Ancer-v3.5/Ancer/Help.chm
    • Size 270KB
    • SHA256 a4b8792f4ed4112ab1bc8fd43c95ff32ddb19b03dd707e63bcd6d5b6830ce766
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral5behavioral6
    • Target
      Ancer-v3.5/Ancer/SkinMagic.dll
    • Size 308KB
    • SHA256 679028f84556b19c6b4b6810996a32f8e06964b164f07fc29b1761b6315b6c47
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks