eed3eea7a5cceef14a6182499af5b889dc25e40be02c8797cf33beb345b8a8aa | Triage

Submit
Reports

Overview

overview

Static

static

7

387fbe0a00...18.dll

windows7-x64

387fbe0a00...18.dll

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

387fbe0a00099161abc9c241e1a3645f_JaffaCakes118
Size

21KB
Sample

240711-k2rzhszbjr
MD5

387fbe0a00099161abc9c241e1a3645f
SHA1

bf3a68ae79a5a59bab0938dec3600c724bdfb660
SHA256

eed3eea7a5cceef14a6182499af5b889dc25e40be02c8797cf33beb345b8a8aa
SHA512

72e05f321ee5b527caccb781a8b54d958f92e50d4a2e6dc4ca517db5530edf8fdd39f0bdc8ddecdbb9a3164c8eb92198db8dc2472b7e6dca7f6f41578b995266
SSDEEP

384:HeW80xXjYUU+Y0k0/3m/Bg9+eWTTRf18N9Q31lfQ6EE2kcQC8eV9OK:HeT0xzYgNk6mq9+tm4lfZfCBVYK

Score

10^/10

defense_evasion evasion upx

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

387fbe0a00099161abc9c241e1a3645f_JaffaCakes118.dll

Resource

win7-20240705-en

defense_evasion evasion upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

387fbe0a00099161abc9c241e1a3645f_JaffaCakes118.dll

Resource

win10v2004-20240709-en

defense_evasion evasion upx

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  387fbe0a00099161abc9c241e1a3645f_JaffaCakes118
- Size
  
  21KB
- MD5
  
  387fbe0a00099161abc9c241e1a3645f
- SHA1
  
  bf3a68ae79a5a59bab0938dec3600c724bdfb660
- SHA256
  
  eed3eea7a5cceef14a6182499af5b889dc25e40be02c8797cf33beb345b8a8aa
- SHA512
  
  72e05f321ee5b527caccb781a8b54d958f92e50d4a2e6dc4ca517db5530edf8fdd39f0bdc8ddecdbb9a3164c8eb92198db8dc2472b7e6dca7f6f41578b995266
- SSDEEP
  
  384:HeW80xXjYUU+Y0k0/3m/Bg9+eWTTRf18N9Q31lfQ6EE2kcQC8eV9OK:HeT0xzYgNk6mq9+tm4lfZfCBVYK
Score

10^/10

defense_evasion evasion upx
- Modifies firewall policy service
  evasion
- Impair Defenses: Safe Mode Boot
  defense_evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Safe Mode Boot

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasionevasionupx

behavioral2

defense_evasionevasionupx

© 2018-2025

Terms | Privacy