Overview

overview

7

Static

static

3

c056945742...18.exe

windows7-x64

7

c056945742...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c056945742c70ad8a922549c817444f5_JaffaCakes118

  • Size

    156KB

  • Sample

    240825-kdez2swfnm

  • MD5

    c056945742c70ad8a922549c817444f5

  • SHA1

    8fa2f99809dfec4cbbd54bbdfb41d928cfdab460

  • SHA256

    dd5af7760130d6994b31448bb3783609172e20e18023459db0cacdda98b2a387

  • SHA512

    4e2217bada34478a7249ae28c94223b4cdd32a4d9930ff6b09304f870227f6cf9cfcdc42d0f441e6a0659737e1f84a2294eeabe5f01c293f6a4e5aeacd528f9f

  • SSDEEP

    3072:PoUs8w85SfTEHHsQNZJPfXJ7UGA95wjUbMlNPVBcvWtmJhA7WppCfE:P0l8sfTEn3Xdf57UGJUYzPc4a8fE

Score
7/10
adwarediscoverystealerupx

Malware Config

Targets

    • Target

      c056945742c70ad8a922549c817444f5_JaffaCakes118

    • Size

      156KB

    • MD5

      c056945742c70ad8a922549c817444f5

    • SHA1

      8fa2f99809dfec4cbbd54bbdfb41d928cfdab460

    • SHA256

      dd5af7760130d6994b31448bb3783609172e20e18023459db0cacdda98b2a387

    • SHA512

      4e2217bada34478a7249ae28c94223b4cdd32a4d9930ff6b09304f870227f6cf9cfcdc42d0f441e6a0659737e1f84a2294eeabe5f01c293f6a4e5aeacd528f9f

    • SSDEEP

      3072:PoUs8w85SfTEHHsQNZJPfXJ7UGA95wjUbMlNPVBcvWtmJhA7WppCfE:P0l8sfTEn3Xdf57UGJUYzPc4a8fE

    Score
    7/10
    adwarediscoverystealerupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks