Overview

overview

7

Static

static

3

b272403531...18.dll

windows7-x64

3

b272403531...18.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b27240353196ccdf49b5244f5e61e1b3_JaffaCakes118

  • Size

    43KB

  • Sample

    240821-herzwsthpa

  • MD5

    b27240353196ccdf49b5244f5e61e1b3

  • SHA1

    8753c8049a0612862696d3125dd1bf8f0d82e9e7

  • SHA256

    2b57d211d64c938f3689a7c4347ce3a9ac2fc89c6514f31c7d2e1d9287e3bf84

  • SHA512

    d09c69cde00a0eec1c819317899bb44080672624c1716de092772b4d529c4b9337be8db8633215118d9093443d6016f3b61a47b32362e9a98ce9b04bce5400a5

  • SSDEEP

    768:TLyQIaMxh9WQ3jzaoEZ8nPLBsN/Xxc4XvvDDBWUtgC/+jT5rTLaI8MwJ7N346:nyQLgWQ3ioEZK1sfhXvvD0+gjtXLacoh

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      b27240353196ccdf49b5244f5e61e1b3_JaffaCakes118

    • Size

      43KB

    • MD5

      b27240353196ccdf49b5244f5e61e1b3

    • SHA1

      8753c8049a0612862696d3125dd1bf8f0d82e9e7

    • SHA256

      2b57d211d64c938f3689a7c4347ce3a9ac2fc89c6514f31c7d2e1d9287e3bf84

    • SHA512

      d09c69cde00a0eec1c819317899bb44080672624c1716de092772b4d529c4b9337be8db8633215118d9093443d6016f3b61a47b32362e9a98ce9b04bce5400a5

    • SSDEEP

      768:TLyQIaMxh9WQ3jzaoEZ8nPLBsN/Xxc4XvvDDBWUtgC/+jT5rTLaI8MwJ7N346:nyQLgWQ3ioEZK1sfhXvvD0+gjtXLacoh

    Score
    7/10
    discoverypersistenceupx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks