Overview

overview

8

Static

static

7

3df58db5b4...18.exe

windows7-x64

8

3df58db5b4...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3df58db5b49260f870c801257bd377b0_JaffaCakes118

  • Size

    762KB

  • Sample

    240712-s25jlssbmf

  • MD5

    3df58db5b49260f870c801257bd377b0

  • SHA1

    99be6e76e4e7aaf6eb7c8640e02f9edcc558dce0

  • SHA256

    8857c2962f47a745f243cdda7ded14a11540048a93146d8d2ca81192bff5cb93

  • SHA512

    33586902b58c4180e69df9b2d7d3eaa70ca50065cf935eb35537a6b34960cef663054ee74c54e4bcea73af2ad54e2424fecda919e87e9c6f6f165a678ba0bd2f

  • SSDEEP

    12288:RXIq8rbrA8S0VHrlPGUmGob5cjNVJe39su8okZp4:mRvA8ljecNA7W

Score
8/10
evasiontrojanvmprotect

Malware Config

Targets

    • Target

      3df58db5b49260f870c801257bd377b0_JaffaCakes118

    • Size

      762KB

    • MD5

      3df58db5b49260f870c801257bd377b0

    • SHA1

      99be6e76e4e7aaf6eb7c8640e02f9edcc558dce0

    • SHA256

      8857c2962f47a745f243cdda7ded14a11540048a93146d8d2ca81192bff5cb93

    • SHA512

      33586902b58c4180e69df9b2d7d3eaa70ca50065cf935eb35537a6b34960cef663054ee74c54e4bcea73af2ad54e2424fecda919e87e9c6f6f165a678ba0bd2f

    • SSDEEP

      12288:RXIq8rbrA8S0VHrlPGUmGob5cjNVJe39su8okZp4:mRvA8ljecNA7W

    Score
    8/10
    evasiontrojanvmprotect

    • Drops file in Drivers directory

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks