Overview

overview

7

Static

static

3

f67b756b68...18.exe

windows7-x64

7

f67b756b68...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    f67b756b68812df91a3bdf0ffb1fb5f5_JaffaCakes118

  • Size

    148KB

  • Sample

    240925-vss6bszgnh

  • MD5

    f67b756b68812df91a3bdf0ffb1fb5f5

  • SHA1

    61825c8eba6fdd617e8d511b441122a0de2104db

  • SHA256

    0d66e4495f396869308abb300eed5644188f70caaf736d68ec8d8075ec4aba47

  • SHA512

    fce53e3e6af713a869c690659f2b9208ccdada5c4321b7fa202d5dd6bc48d7d03758a48f0cf07be715858223585fff8eb1c4d6da471186b26b03600e30644e1c

  • SSDEEP

    3072:wDh380BMyJ1sizw4LiFjv7rveixfuHgmT0LeahNcnmhCGD:V0bPzw4Wjv7TzAHRZahNymr

Score
7/10
adwarediscoverystealerupx

Malware Config

Targets

    • Target

      f67b756b68812df91a3bdf0ffb1fb5f5_JaffaCakes118

    • Size

      148KB

    • MD5

      f67b756b68812df91a3bdf0ffb1fb5f5

    • SHA1

      61825c8eba6fdd617e8d511b441122a0de2104db

    • SHA256

      0d66e4495f396869308abb300eed5644188f70caaf736d68ec8d8075ec4aba47

    • SHA512

      fce53e3e6af713a869c690659f2b9208ccdada5c4321b7fa202d5dd6bc48d7d03758a48f0cf07be715858223585fff8eb1c4d6da471186b26b03600e30644e1c

    • SSDEEP

      3072:wDh380BMyJ1sizw4LiFjv7rveixfuHgmT0LeahNcnmhCGD:V0bPzw4Wjv7TzAHRZahNymr

    Score
    7/10
    adwarediscoverystealerupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks