Overview

overview

7

Static

static

7

8e87747e17...18.dll

windows7-x64

7

8e87747e17...18.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e87747e178192b415e954dae93b15ce_JaffaCakes118

  • Size

    34KB

  • Sample

    240812-nc2n7ssgma

  • MD5

    8e87747e178192b415e954dae93b15ce

  • SHA1

    ddd37b5d94bfe20b23a59dc454efc192c369edc1

  • SHA256

    128c1d7d6da17c7f8ad7435099536eac00eb34e4b608a30fb4c8735245a36836

  • SHA512

    c14debbc262ba305217155b3aef3158dfaff2b60eeada8a6f261f1b4f77699145c2723388f3c534819f942f4ab7d0c17358a8b43de9a94693c77fc2d6156256a

  • SSDEEP

    768:ZRl6y9NA4IrzfPNyfbIAZRe7MPDeYaxVf/6D4f:N660rjPm9K7swqD4f

Score
7/10
defense_evasiondiscoveryprivilege_escalationupx

Malware Config

Targets

    • Target

      8e87747e178192b415e954dae93b15ce_JaffaCakes118

    • Size

      34KB

    • MD5

      8e87747e178192b415e954dae93b15ce

    • SHA1

      ddd37b5d94bfe20b23a59dc454efc192c369edc1

    • SHA256

      128c1d7d6da17c7f8ad7435099536eac00eb34e4b608a30fb4c8735245a36836

    • SHA512

      c14debbc262ba305217155b3aef3158dfaff2b60eeada8a6f261f1b4f77699145c2723388f3c534819f942f4ab7d0c17358a8b43de9a94693c77fc2d6156256a

    • SSDEEP

      768:ZRl6y9NA4IrzfPNyfbIAZRe7MPDeYaxVf/6D4f:N660rjPm9K7swqD4f

    Score
    7/10
    defense_evasiondiscoveryprivilege_escalationupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks