Overview

overview

7

Static

static

7

d2f18d4c7b...18.exe

windows7-x64

7

d2f18d4c7b...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d2f18d4c7b7be4eb208cdc574a078117_JaffaCakes118

  • Size

    85KB

  • Sample

    240907-15gwqayaml

  • MD5

    d2f18d4c7b7be4eb208cdc574a078117

  • SHA1

    45ec8bed612dece7729538263101e819bc429237

  • SHA256

    c4130553ed9d17ec896f027a93d8aa806403ef90cd91c1d74d4d68ee3f8a3471

  • SHA512

    4c6f19feb542264a75a2cb6873880f788f26241971b3cfbd4135800f0e62a761200780bc375da5e6110f155a74ad8798a81e51eb9f52b7a7e4d0c9e050c61d12

  • SSDEEP

    1536:NahfCLZ4mJtwpIjw1EtKs4k7sPEnv90aPRZLZU5T9JBN+jBJoh7TZpUY0eSkIW:ohCm0twpIMOgjk7sPEv5ptS5ZN+Qh7TR

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      d2f18d4c7b7be4eb208cdc574a078117_JaffaCakes118

    • Size

      85KB

    • MD5

      d2f18d4c7b7be4eb208cdc574a078117

    • SHA1

      45ec8bed612dece7729538263101e819bc429237

    • SHA256

      c4130553ed9d17ec896f027a93d8aa806403ef90cd91c1d74d4d68ee3f8a3471

    • SHA512

      4c6f19feb542264a75a2cb6873880f788f26241971b3cfbd4135800f0e62a761200780bc375da5e6110f155a74ad8798a81e51eb9f52b7a7e4d0c9e050c61d12

    • SSDEEP

      1536:NahfCLZ4mJtwpIjw1EtKs4k7sPEnv90aPRZLZU5T9JBN+jBJoh7TZpUY0eSkIW:ohCm0twpIMOgjk7sPEv5ptS5ZN+Qh7TR

    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks