Overview

overview

7

Static

static

7

43ada4bf95...18.dll

windows7-x64

7

43ada4bf95...18.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    43ada4bf951a9b18066824afcb05f769_JaffaCakes118

  • Size

    36KB

  • Sample

    240713-3e8b4a1amq

  • MD5

    43ada4bf951a9b18066824afcb05f769

  • SHA1

    70947f40bb84e1a50d53d3ca1a0b6c3dff3811fc

  • SHA256

    d758c0f0b1588244cede68f6a64d182189d2e9e783c9f1735e4526b8040bbb7d

  • SHA512

    bc8e8c33d2c84299c67f38cadc0296b1513c0feada9bf8d129c32ec3def4382aaeac12406056d083cb60594932d4bf1b3661a6809aab3c75bc5507964e375389

  • SSDEEP

    768:7bYuaonT3EzXZPelnhQBHRctjh8Zh2Bnbc46bNtly3WYoGVxzknbcuyD7UECd:7bY7MEzXFY0HnZGbcdbNdGVxzknouy8J

Score
7/10
defense_evasionprivilege_escalationupx

Malware Config

Targets

    • Target

      43ada4bf951a9b18066824afcb05f769_JaffaCakes118

    • Size

      36KB

    • MD5

      43ada4bf951a9b18066824afcb05f769

    • SHA1

      70947f40bb84e1a50d53d3ca1a0b6c3dff3811fc

    • SHA256

      d758c0f0b1588244cede68f6a64d182189d2e9e783c9f1735e4526b8040bbb7d

    • SHA512

      bc8e8c33d2c84299c67f38cadc0296b1513c0feada9bf8d129c32ec3def4382aaeac12406056d083cb60594932d4bf1b3661a6809aab3c75bc5507964e375389

    • SSDEEP

      768:7bYuaonT3EzXZPelnhQBHRctjh8Zh2Bnbc46bNtly3WYoGVxzknbcuyD7UECd:7bY7MEzXFY0HnZGbcdbNdGVxzknouy8J

    Score
    7/10
    defense_evasionprivilege_escalationupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks