Overview

overview

7

Static

static

7

0fdc6ecf33...18.dll

windows7-x64

7

0fdc6ecf33...18.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0fdc6ecf33676ab3dd549483b2b3f285_JaffaCakes118

  • Size

    740KB

  • Sample

    240625-225n2s1hkm

  • MD5

    0fdc6ecf33676ab3dd549483b2b3f285

  • SHA1

    397f6214781c7e9de94269145eac90dcd71f5e99

  • SHA256

    0480bf1cf93047a74d846fa42c749b25a54b401ad23fbd907de6f4bd6eb875c9

  • SHA512

    be00790f821b6b9dd28f80b5451e474067d67f7b9204b160588fd50e7e491b953df6bba8a21454ad3374168bd7145a419b924d400a50458dac03523e613fcd17

  • SSDEEP

    12288:AnHEYPYJ6nX+X384FppaIXTUhfZcYQFttDuckX+vR5Lz5R4:UEB6nGPpzTUDQjtyckOLz5R4

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      0fdc6ecf33676ab3dd549483b2b3f285_JaffaCakes118

    • Size

      740KB

    • MD5

      0fdc6ecf33676ab3dd549483b2b3f285

    • SHA1

      397f6214781c7e9de94269145eac90dcd71f5e99

    • SHA256

      0480bf1cf93047a74d846fa42c749b25a54b401ad23fbd907de6f4bd6eb875c9

    • SHA512

      be00790f821b6b9dd28f80b5451e474067d67f7b9204b160588fd50e7e491b953df6bba8a21454ad3374168bd7145a419b924d400a50458dac03523e613fcd17

    • SSDEEP

      12288:AnHEYPYJ6nX+X384FppaIXTUhfZcYQFttDuckX+vR5Lz5R4:UEB6nGPpzTUDQjtyckOLz5R4

    Score
    7/10
    vmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks