Overview

overview

7

Static

static

7

019a0a341a...18.exe

windows7-x64

7

019a0a341a...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    019a0a341af576bba6f250b5c1c4f742_JaffaCakes118

  • Size

    1.8MB

  • Sample

    240426-y9z7rabe99

  • MD5

    019a0a341af576bba6f250b5c1c4f742

  • SHA1

    10d25ca9c534f097de93b6472dc203560a1ef85b

  • SHA256

    bf11521af95a5b4d93c08bc3a4ba878d50b6c8c29e3be0975f6077c083d5b0f2

  • SHA512

    7c1c5829426da32f00c5804f20e04c0eeebee1fa960279225407137f67e34419fe79d0d515afcb53817413148044a406db7de35248d09984f603be6be08c4853

  • SSDEEP

    49152:RtiVXWu9FkOaatSfGsHCkigQuKamXo+wMP+YGmR:uVXWhOxtSfG6TKamX5wS

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      019a0a341af576bba6f250b5c1c4f742_JaffaCakes118

    • Size

      1.8MB

    • MD5

      019a0a341af576bba6f250b5c1c4f742

    • SHA1

      10d25ca9c534f097de93b6472dc203560a1ef85b

    • SHA256

      bf11521af95a5b4d93c08bc3a4ba878d50b6c8c29e3be0975f6077c083d5b0f2

    • SHA512

      7c1c5829426da32f00c5804f20e04c0eeebee1fa960279225407137f67e34419fe79d0d515afcb53817413148044a406db7de35248d09984f603be6be08c4853

    • SSDEEP

      49152:RtiVXWu9FkOaatSfGsHCkigQuKamXo+wMP+YGmR:uVXWhOxtSfG6TKamX5wS

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks