Overview

overview

7

Static

static

7

0c4f34748f...18.dll

windows7-x64

7

0c4f34748f...18.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0c4f34748fa71e29739a69121c507d97_JaffaCakes118

  • Size

    33KB

  • Sample

    240625-d3khhaycjf

  • MD5

    0c4f34748fa71e29739a69121c507d97

  • SHA1

    28a63ed85000e339afece4a1b698a7054c5e5da6

  • SHA256

    15a8899b450eae26197e2b6a71d4bc8f9a64b69ec031f56ba2c0c398e03b6091

  • SHA512

    5e3f20beeb1f5b5a808f7660f52f5943feaedf7554a25e83fb7490bfde4a1274c4f24ccfcc0fb1d6366494b1237e45ca34d0652ae958f55d402d9ad1ce673c7f

  • SSDEEP

    768:02/JowiiMdH6+dJep9FZ3dPRK8XD0wwX5:9cpdH6+nepPZ3dPfI95

Score
7/10
defense_evasionprivilege_escalationupx

Malware Config

Targets

    • Target

      0c4f34748fa71e29739a69121c507d97_JaffaCakes118

    • Size

      33KB

    • MD5

      0c4f34748fa71e29739a69121c507d97

    • SHA1

      28a63ed85000e339afece4a1b698a7054c5e5da6

    • SHA256

      15a8899b450eae26197e2b6a71d4bc8f9a64b69ec031f56ba2c0c398e03b6091

    • SHA512

      5e3f20beeb1f5b5a808f7660f52f5943feaedf7554a25e83fb7490bfde4a1274c4f24ccfcc0fb1d6366494b1237e45ca34d0652ae958f55d402d9ad1ce673c7f

    • SSDEEP

      768:02/JowiiMdH6+dJep9FZ3dPRK8XD0wwX5:9cpdH6+nepPZ3dPfI95

    Score
    7/10
    defense_evasionprivilege_escalationupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks