Overview

overview

7

Static

static

7

30536fb5af...18.dll

windows7-x64

7

30536fb5af...18.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    30536fb5afb7f58535b6e5cff3c59ff1_JaffaCakes118

  • Size

    39KB

  • Sample

    240709-pdfc2atdlq

  • MD5

    30536fb5afb7f58535b6e5cff3c59ff1

  • SHA1

    40ee637d83792de94c0861b93b0eaf0617bdd005

  • SHA256

    38cf9312783df62448feca1ceb3b2d5b8bf8469d4c383c732b492db6654d523e

  • SHA512

    f8f9458b4ce03740f089d60c280b6115e8349b37ca5e8bdda3f586dcadb0aa9ac2e8de5e13310fc8c747f04da525cd95f968e44291183fcb67a7a800f7a4afed

  • SSDEEP

    768:3T2TXfS9CGwU6l3eVUcd/DQ9iyi9sAbyA3Xe5TbAJ/nbcuyD7Um:3THIGwU6xkvdEi9sAj+VMJ/nouy8m

Score
7/10
defense_evasionprivilege_escalationupx

Malware Config

Targets

    • Target

      30536fb5afb7f58535b6e5cff3c59ff1_JaffaCakes118

    • Size

      39KB

    • MD5

      30536fb5afb7f58535b6e5cff3c59ff1

    • SHA1

      40ee637d83792de94c0861b93b0eaf0617bdd005

    • SHA256

      38cf9312783df62448feca1ceb3b2d5b8bf8469d4c383c732b492db6654d523e

    • SHA512

      f8f9458b4ce03740f089d60c280b6115e8349b37ca5e8bdda3f586dcadb0aa9ac2e8de5e13310fc8c747f04da525cd95f968e44291183fcb67a7a800f7a4afed

    • SSDEEP

      768:3T2TXfS9CGwU6l3eVUcd/DQ9iyi9sAbyA3Xe5TbAJ/nbcuyD7Um:3THIGwU6xkvdEi9sAj+VMJ/nouy8m

    Score
    7/10
    defense_evasionprivilege_escalationupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks