Overview

overview

7

Static

static

7

48cbcd872e...18.dll

windows7-x64

7

48cbcd872e...18.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    48cbcd872ec0b859a52a84700fdadb60_JaffaCakes118

  • Size

    34KB

  • Sample

    240715-h893kavdlj

  • MD5

    48cbcd872ec0b859a52a84700fdadb60

  • SHA1

    ce9716ced13c450ecc26c18905276c1f9e418008

  • SHA256

    8e447333f06d98d88eb9dba18c6cf8825d76158458804975caa6432e17dac6c5

  • SHA512

    e4222fff22bc8803146634e130369cb4f351b18f99cc5eceb000aed98fa60865b030efbb0267979671adc96483a73e2ef09c57499135b130cc0b08eaec4e6fa0

  • SSDEEP

    768:7sfV5PRqRw82E8jtyWlLDLwFVE4GEIIlmfM1wzsSnbcuyD7UMBa:7zJWlLwFVE4HOMxSnouy8MBa

Score
7/10
defense_evasionprivilege_escalationupx

Malware Config

Targets

    • Target

      48cbcd872ec0b859a52a84700fdadb60_JaffaCakes118

    • Size

      34KB

    • MD5

      48cbcd872ec0b859a52a84700fdadb60

    • SHA1

      ce9716ced13c450ecc26c18905276c1f9e418008

    • SHA256

      8e447333f06d98d88eb9dba18c6cf8825d76158458804975caa6432e17dac6c5

    • SHA512

      e4222fff22bc8803146634e130369cb4f351b18f99cc5eceb000aed98fa60865b030efbb0267979671adc96483a73e2ef09c57499135b130cc0b08eaec4e6fa0

    • SSDEEP

      768:7sfV5PRqRw82E8jtyWlLDLwFVE4GEIIlmfM1wzsSnbcuyD7UMBa:7zJWlLwFVE4HOMxSnouy8MBa

    Score
    7/10
    defense_evasionprivilege_escalationupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks