Overview

overview

7

Static

static

3

47191516f2...18.exe

windows7-x64

1

47191516f2...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    47191516f2bd453f1a2d7c500b82f359_JaffaCakes118

  • Size

    3.2MB

  • Sample

    240714-2nvlxsyarf

  • MD5

    47191516f2bd453f1a2d7c500b82f359

  • SHA1

    cd61840b87d1e26c0dd4227620c4541f83b047b3

  • SHA256

    704aa3fdb207e995bb723a1ea2dabd09065a418ec13996704e5e4c2944b423b9

  • SHA512

    d00ba7966463ab5b3592e1cd6c0cebd2fc79863860fcffc492c03570c8677c0d582d14736720b26b4eb835abcda2c275038d03dee9e77e95027758c99dd21103

  • SSDEEP

    98304:l/7XMNzgMn72Jj+/vkBnX5BJRlEgzGhmK:hXMNkMT0RpBJXtChd

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      47191516f2bd453f1a2d7c500b82f359_JaffaCakes118

    • Size

      3.2MB

    • MD5

      47191516f2bd453f1a2d7c500b82f359

    • SHA1

      cd61840b87d1e26c0dd4227620c4541f83b047b3

    • SHA256

      704aa3fdb207e995bb723a1ea2dabd09065a418ec13996704e5e4c2944b423b9

    • SHA512

      d00ba7966463ab5b3592e1cd6c0cebd2fc79863860fcffc492c03570c8677c0d582d14736720b26b4eb835abcda2c275038d03dee9e77e95027758c99dd21103

    • SSDEEP

      98304:l/7XMNzgMn72Jj+/vkBnX5BJRlEgzGhmK:hXMNkMT0RpBJXtChd

    Score
    7/10
    vmprotect

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks