Overview

overview

8

Static

static

3

2aaa7f8db7...18.exe

windows7-x64

8

2aaa7f8db7...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    2aaa7f8db74423c52106dd73d7fdd062_JaffaCakes118

  • Size

    87KB

  • Sample

    240708-cxtzbazgre

  • MD5

    2aaa7f8db74423c52106dd73d7fdd062

  • SHA1

    a159f2b03279a7ee1ebc62e9cf462f21a7c11697

  • SHA256

    f6e30d5086980bfb8723136b6d6de9e5bac1d32bc385f5969a9b90d603db7f61

  • SHA512

    b5b3549bd41e252a85a80e8c34ad80ac8d2b15b0d76808c4525ebca44095aeb70aa929fa02c983fecec728e5b22fdb24e0377f3cca0762f7dd9f7fa84ecbd3e4

  • SSDEEP

    1536:Q4HlPu18bn3kL0vQTXVf3BFnToIf1TFRr5ZyNbWEnZsPdcf1/Tym:jHldMVf3BtTBf1TFRr5ZyNbWUf1um

Score
8/10
vmprotect

Malware Config

Targets

    • Target

      2aaa7f8db74423c52106dd73d7fdd062_JaffaCakes118

    • Size

      87KB

    • MD5

      2aaa7f8db74423c52106dd73d7fdd062

    • SHA1

      a159f2b03279a7ee1ebc62e9cf462f21a7c11697

    • SHA256

      f6e30d5086980bfb8723136b6d6de9e5bac1d32bc385f5969a9b90d603db7f61

    • SHA512

      b5b3549bd41e252a85a80e8c34ad80ac8d2b15b0d76808c4525ebca44095aeb70aa929fa02c983fecec728e5b22fdb24e0377f3cca0762f7dd9f7fa84ecbd3e4

    • SSDEEP

      1536:Q4HlPu18bn3kL0vQTXVf3BFnToIf1TFRr5ZyNbWEnZsPdcf1/Tym:jHldMVf3BtTBf1TFRr5ZyNbWUf1um

    Score
    8/10
    vmprotect

    • Drops file in Drivers directory

    • Deletes itself

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks