Overview

overview

8

Static

static

7

25b4f53e2b...18.dll

windows7-x64

8

25b4f53e2b...18.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25b4f53e2b441d18df560cebebc06be7_JaffaCakes118

  • Size

    94KB

  • Sample

    240704-wkfqps1emp

  • MD5

    25b4f53e2b441d18df560cebebc06be7

  • SHA1

    49a04e5975d4058b66305ccc372811eea8d356a1

  • SHA256

    ee48eb5538418a68b50db8cde4483110f156ed5f70ad714cc16bdd8c822e89eb

  • SHA512

    5bba3c38766fd63e644d2d0bd2ff489247df8e9482583730620241d56afccdd189a8ca98066d922e3ce5ee98ea6317bcd5d72a804eeb9209c5c5cc95364b0027

  • SSDEEP

    1536:mGky8V4yKGeRbxMnciZ+MoKYbEjMWZUrmWVRrdTfm9ZcjXeDJ7TBGoGC6oib9E:mLdVeROnci3obBaWXrd7mwbeD1/1zibW

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      25b4f53e2b441d18df560cebebc06be7_JaffaCakes118

    • Size

      94KB

    • MD5

      25b4f53e2b441d18df560cebebc06be7

    • SHA1

      49a04e5975d4058b66305ccc372811eea8d356a1

    • SHA256

      ee48eb5538418a68b50db8cde4483110f156ed5f70ad714cc16bdd8c822e89eb

    • SHA512

      5bba3c38766fd63e644d2d0bd2ff489247df8e9482583730620241d56afccdd189a8ca98066d922e3ce5ee98ea6317bcd5d72a804eeb9209c5c5cc95364b0027

    • SSDEEP

      1536:mGky8V4yKGeRbxMnciZ+MoKYbEjMWZUrmWVRrdTfm9ZcjXeDJ7TBGoGC6oib9E:mLdVeROnci3obBaWXrd7mwbeD1/1zibW

    Score
    8/10
    persistenceupx

    • Drops file in Drivers directory

    • Server Software Component: Terminal Services DLL

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks