Overview

overview

7

Static

static

3

56c198e3b7...18.exe

windows7-x64

7

56c198e3b7...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56c198e3b7e0289d33a03e0dc743562e_JaffaCakes118

  • Size

    714KB

  • Sample

    241018-lslxkszepc

  • MD5

    56c198e3b7e0289d33a03e0dc743562e

  • SHA1

    73f9d83da2fd57262a4a9eea26352920162e67c0

  • SHA256

    7bb8d5637f4d94959d38d54f4d8eec1bc7ed3c3fb436d52531eadf56bd775bf3

  • SHA512

    2954d2cbd8596f7d10e0fdb024557e623324b9ba2ea6c2d363db2c2bf2851685b374f3c0fa24da4c5f16dd108a131d17110921cea764d17fc4aa5b84a8492a61

  • SSDEEP

    12288:3vmTfBj+4sqM5U6kgI9AEcO2J146QcXH16Rt/FN3h7IVdgkALYvDgeaRIBETv:3v2+3qh6kginKJh1XcRtjh7InfvDVZBq

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      56c198e3b7e0289d33a03e0dc743562e_JaffaCakes118

    • Size

      714KB

    • MD5

      56c198e3b7e0289d33a03e0dc743562e

    • SHA1

      73f9d83da2fd57262a4a9eea26352920162e67c0

    • SHA256

      7bb8d5637f4d94959d38d54f4d8eec1bc7ed3c3fb436d52531eadf56bd775bf3

    • SHA512

      2954d2cbd8596f7d10e0fdb024557e623324b9ba2ea6c2d363db2c2bf2851685b374f3c0fa24da4c5f16dd108a131d17110921cea764d17fc4aa5b84a8492a61

    • SSDEEP

      12288:3vmTfBj+4sqM5U6kgI9AEcO2J146QcXH16Rt/FN3h7IVdgkALYvDgeaRIBETv:3v2+3qh6kginKJh1XcRtjh7InfvDVZBq

    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks