Overview

overview

7

Static

static

3

20e753eb4f...18.exe

windows7-x64

7

20e753eb4f...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20e753eb4fd6baa271f2fc7e852cd185_JaffaCakes118

  • Size

    257KB

  • Sample

    240703-dtd95ayfrr

  • MD5

    20e753eb4fd6baa271f2fc7e852cd185

  • SHA1

    b4797e0f9e1965dca426a9977fcfc65687ec16c6

  • SHA256

    0cfbd1efa3fcadc271811b0516f13f10fc387a646b3e18c5b897876adcb51783

  • SHA512

    83198192e688c0e075e4eed24697f1027e8e33e863569389986ec7e146bd22d80ea742bcb57cbc8744efc915eb01c69300b9c37a9a96caf109f4b151e15f77f9

  • SSDEEP

    3072:kbgAlpVUUgDfwl+LBvnVdQrUg5ZjFGxuLy/ug986sXC6NCHOv:kgAAfwkLBvnVsZjFGxuW/ugWdXC68O

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      20e753eb4fd6baa271f2fc7e852cd185_JaffaCakes118

    • Size

      257KB

    • MD5

      20e753eb4fd6baa271f2fc7e852cd185

    • SHA1

      b4797e0f9e1965dca426a9977fcfc65687ec16c6

    • SHA256

      0cfbd1efa3fcadc271811b0516f13f10fc387a646b3e18c5b897876adcb51783

    • SHA512

      83198192e688c0e075e4eed24697f1027e8e33e863569389986ec7e146bd22d80ea742bcb57cbc8744efc915eb01c69300b9c37a9a96caf109f4b151e15f77f9

    • SSDEEP

      3072:kbgAlpVUUgDfwl+LBvnVdQrUg5ZjFGxuLy/ug986sXC6NCHOv:kgAAfwkLBvnVsZjFGxuW/ugWdXC68O

    Score
    7/10
    vmprotect

    • Deletes itself

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks