Overview

overview

7

Static

static

7

61b81b6a2d...18.exe

windows7-x64

7

61b81b6a2d...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    61b81b6a2d39b83d6c6b5bc843a88218_JaffaCakes118

  • Size

    68KB

  • Sample

    240721-2qxjas1crn

  • MD5

    61b81b6a2d39b83d6c6b5bc843a88218

  • SHA1

    bcc3e92eeceaaf2d599c5ba99a1b6f64f76311c9

  • SHA256

    59f951b8794cf3cb634e3bb747e095ab4f0a3762e2a4c77e9a6078e7a821676f

  • SHA512

    3155df76dfaa29ae33b63c32f1e12d1ce3eb328bf9d2ec7fe9d7abce268495cbdab18472b8f531b63c52b32495557d375dbe40a6d66c83fe2be7bd1b15cd490b

  • SSDEEP

    1536:KGgJJ6M7AtYRgtUjRlZlWrVFWWJ6lROYnf9xV/NAxEL:KGgJv7G/6KfJ6lRO81W

Score
7/10
vmprotect

Malware Config

Targets

    • Target

      61b81b6a2d39b83d6c6b5bc843a88218_JaffaCakes118

    • Size

      68KB

    • MD5

      61b81b6a2d39b83d6c6b5bc843a88218

    • SHA1

      bcc3e92eeceaaf2d599c5ba99a1b6f64f76311c9

    • SHA256

      59f951b8794cf3cb634e3bb747e095ab4f0a3762e2a4c77e9a6078e7a821676f

    • SHA512

      3155df76dfaa29ae33b63c32f1e12d1ce3eb328bf9d2ec7fe9d7abce268495cbdab18472b8f531b63c52b32495557d375dbe40a6d66c83fe2be7bd1b15cd490b

    • SSDEEP

      1536:KGgJJ6M7AtYRgtUjRlZlWrVFWWJ6lROYnf9xV/NAxEL:KGgJv7G/6KfJ6lRO81W

    Score
    7/10
    vmprotect

    • Deletes itself

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks