Overview

overview

7

Static

static

7

娱乐社区dnf.exe

windows7-x64

7

娱乐社区dnf.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2beb999170309702baaaf254b6549bf6_JaffaCakes118

  • Size

    403KB

  • Sample

    240708-l4xhfsweqa

  • MD5

    2beb999170309702baaaf254b6549bf6

  • SHA1

    ae917c5921005bd9a11b3ee6b584f12762edee7d

  • SHA256

    4227754545e2dac37233f5922841ca2678f250dc1555963e34a907ceb774c288

  • SHA512

    fd9b6971140ffd09a5c6e45715928b55efc6d37ea28bc63af692ef938459eaf1c94f902d2f399047612f8ef2c95bd1edb9409c7d1696a8c047206eac67bd6f44

  • SSDEEP

    12288:Pm6MWY+AbbPSPy9XXAEAVy6Aj60B/Q6VcnAS:+SY+0aPydlIyTj60t6AS

Score
7/10
upx

Malware Config

Targets

    • Target

      娱乐社区dnf.exe

    • Size

      414KB

    • MD5

      ab36542cd0851e69dc577fb8a902bbf6

    • SHA1

      8572c3fa65406fa70832fcbf0ade88593f603203

    • SHA256

      72028cd4f8f24381e6fafc128d8539aa43a9d4899d70eefacc83a21941c77d2c

    • SHA512

      7150b904d558c8bd1dea3690c3801b2a4f5badcd8c102fa94bd4bba225081b538815d25d07a8f89e2d387a01cf212c9c0bd155cbd487be58134f511e3f9bfc82

    • SSDEEP

      6144:tTtpPJpxe+TRvche/fBlA/JnzboOr0Pw4NY/BHKROqYV0GzCj4//AWy72gLK:tPJnLTRvXJ+FIfY4a/FMaV0GS4/+7L

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks