Overview

overview

7

Static

static

7

6efb7a628a...18.dll

windows7-x64

7

6efb7a628a...18.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6efb7a628af90d560d8d9f0f23d1fd42_JaffaCakes118

  • Size

    724KB

  • Sample

    240725-k91avszgmn

  • MD5

    6efb7a628af90d560d8d9f0f23d1fd42

  • SHA1

    5e989d7bb0546b9f6eeada4b18cf1fd9df9ebd8e

  • SHA256

    61f0e4ab777c9e65d039184817430f5be6b8953ba5eb7560edc29d2bc65a3d98

  • SHA512

    615f910536f268b815fbe5e6757424405eee0492df587fb60326cb4994b7e394e4def03b595713516c9b92b4c405b9baea935242cc4c09bf68a0363cbde04e7b

  • SSDEEP

    12288:7NLMlgQLewMI9BHdQ+rmNMo23S+qGxJHYWLzKNf4Jh0g+vmL3qPYmJpdzNZv:SHXXHe+rCMNXHYq2kh1byYmF

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      6efb7a628af90d560d8d9f0f23d1fd42_JaffaCakes118

    • Size

      724KB

    • MD5

      6efb7a628af90d560d8d9f0f23d1fd42

    • SHA1

      5e989d7bb0546b9f6eeada4b18cf1fd9df9ebd8e

    • SHA256

      61f0e4ab777c9e65d039184817430f5be6b8953ba5eb7560edc29d2bc65a3d98

    • SHA512

      615f910536f268b815fbe5e6757424405eee0492df587fb60326cb4994b7e394e4def03b595713516c9b92b4c405b9baea935242cc4c09bf68a0363cbde04e7b

    • SSDEEP

      12288:7NLMlgQLewMI9BHdQ+rmNMo23S+qGxJHYWLzKNf4Jh0g+vmL3qPYmJpdzNZv:SHXXHe+rCMNXHYq2kh1byYmF

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks