Overview

overview

7

Static

static

3

7bbc1e1401...18.exe

windows7-x64

7

7bbc1e1401...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    7bbc1e1401efa9faec7e3edb458c9611_JaffaCakes118

  • Size

    10.1MB

  • Sample

    240528-fb1rhseh5t

  • MD5

    7bbc1e1401efa9faec7e3edb458c9611

  • SHA1

    5f2ca23edeb0e5d62f8540082e7a6b8f0bfa8a3c

  • SHA256

    6070ec28c24eaed7dc7ac95c21c4dd1e1fac7700d20c12e81be066c1ce24e6b3

  • SHA512

    001313e2d87958c41275560441ec85f85ae28deda19c9a70d23d8150ebd9bee368af76e5c393ba93cdda8bd19381dce7df40531aa2c81cdf4fb4f13b6ae1fd09

  • SSDEEP

    196608:0CEeuct4kaVKI42gjD4aBzwmKqJntcrwkGWQjOmWCNn53/bgYmiG:0dUakawPlHvpwmxtQwWw53/bgYZG

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      7bbc1e1401efa9faec7e3edb458c9611_JaffaCakes118

    • Size

      10.1MB

    • MD5

      7bbc1e1401efa9faec7e3edb458c9611

    • SHA1

      5f2ca23edeb0e5d62f8540082e7a6b8f0bfa8a3c

    • SHA256

      6070ec28c24eaed7dc7ac95c21c4dd1e1fac7700d20c12e81be066c1ce24e6b3

    • SHA512

      001313e2d87958c41275560441ec85f85ae28deda19c9a70d23d8150ebd9bee368af76e5c393ba93cdda8bd19381dce7df40531aa2c81cdf4fb4f13b6ae1fd09

    • SSDEEP

      196608:0CEeuct4kaVKI42gjD4aBzwmKqJntcrwkGWQjOmWCNn53/bgYmiG:0dUakawPlHvpwmxtQwWw53/bgYZG

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks