General

  • Target

    1372d393be1f20dea5039d2196b2f0c0_JaffaCakes118

  • Size

    228KB

  • Sample

    240626-zwx1xatejb

  • MD5

    1372d393be1f20dea5039d2196b2f0c0

  • SHA1

    d83f62bf84ffab342346b1dc6e439757efabaa71

  • SHA256

    bbec0749460a1bea20a95a7a265794f5648a6c0674c666f911af4b1c7dcbfca9

  • SHA512

    fe81287cfb559d85ea5f972e56c569624f524bb9057a0db4ab91243f45ed94c5e2241e37001667640c02ae6b7546d9b88fa06f8a165176e6119ac9d55ceec695

  • SSDEEP

    6144:ItyMJLiwGwTVvlMoH+LreCx748VhVmVHGOJ+k5:klL72k+ThE

Score
7/10

Malware Config

Targets

    • Target

      1372d393be1f20dea5039d2196b2f0c0_JaffaCakes118

    • Size

      228KB

    • MD5

      1372d393be1f20dea5039d2196b2f0c0

    • SHA1

      d83f62bf84ffab342346b1dc6e439757efabaa71

    • SHA256

      bbec0749460a1bea20a95a7a265794f5648a6c0674c666f911af4b1c7dcbfca9

    • SHA512

      fe81287cfb559d85ea5f972e56c569624f524bb9057a0db4ab91243f45ed94c5e2241e37001667640c02ae6b7546d9b88fa06f8a165176e6119ac9d55ceec695

    • SSDEEP

      6144:ItyMJLiwGwTVvlMoH+LreCx748VhVmVHGOJ+k5:klL72k+ThE

    Score
    7/10
    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks