b40f7a30b26a36932e52ec1b68f91dd18a6aa45d3688600697bf45755f0ad8b7 | Triage

Submit
Reports

Overview

overview

7

Static

static

7

ea9ef4f197...18.dll

windows7-x64

7

ea9ef4f197...18.dll

windows10-2004-x64

7

Sharing

General

Target

ea9ef4f197c35d004e7c036d35fb5026_JaffaCakes118
Size

118KB
Sample

240919-fhms8s1hme
MD5

ea9ef4f197c35d004e7c036d35fb5026
SHA1

a3a2a6beb0715f35d3b047a02dfc6acbb3f7bfec
SHA256

b40f7a30b26a36932e52ec1b68f91dd18a6aa45d3688600697bf45755f0ad8b7
SHA512

6238a1411e7faba3b8a3d001c23e83a4c997f2fe98534bb2348e39105cf61c9b6101637bb897e0454c182806220bc1d81927af8f7e37afcb359e3884fa879a0f
SSDEEP

1536:w8DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:ZIFYjnav4bnOAMaWeAt2outKG

Score

7^/10

defense_evasion discovery privilege_escalation upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

ea9ef4f197c35d004e7c036d35fb5026_JaffaCakes118.dll

Resource

win7-20240903-en

defense_evasion discovery privilege_escalation upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

ea9ef4f197c35d004e7c036d35fb5026_JaffaCakes118.dll

Resource

win10v2004-20240802-en

defense_evasion discovery privilege_escalation upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  ea9ef4f197c35d004e7c036d35fb5026_JaffaCakes118
- Size
  
  118KB
- MD5
  
  ea9ef4f197c35d004e7c036d35fb5026
- SHA1
  
  a3a2a6beb0715f35d3b047a02dfc6acbb3f7bfec
- SHA256
  
  b40f7a30b26a36932e52ec1b68f91dd18a6aa45d3688600697bf45755f0ad8b7
- SHA512
  
  6238a1411e7faba3b8a3d001c23e83a4c997f2fe98534bb2348e39105cf61c9b6101637bb897e0454c182806220bc1d81927af8f7e37afcb359e3884fa879a0f
- SSDEEP
  
  1536:w8DDS7LFiLjnavBSsOnOonMaPJtSNBeAt94nouy8Af206g:ZIFYjnav4bnOAMaWeAt2outKG
Score

7^/10

defense_evasion discovery privilege_escalation upx
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Access Token Manipulation

Create Process with Token

Defense Evasion

Access Token Manipulation

Create Process with Token

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryprivilege_escalationupx

behavioral2

defense_evasiondiscoveryprivilege_escalationupx

© 2018-2025

Terms | Privacy