General

  • Target
    83773389608d6e1f29e85c6f6ec8c3ac_JaffaCakes118
  • Size 2.3MB
  • Sample240809-zdnphssamf
  • SHA256 cc9ecb59ee1459f6375929b6e8b3f5ebf2008edc43dcd4abf1e1b6eb327933ed
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Targets

    • Target
      虚拟磁盘精灵/disk.dll
    • Size 1.6MB
    • SHA256 8feb175fe2d73bf13aadd6ce890f7465bf55b6109fdaddcf6bed316eabca73fd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      虚拟磁盘精灵/msvbvm60.dll
    • Size 1.3MB
    • SHA256 bec16f80e024ac2b182b46415872dbde1a1da553e850a2228a72dec4e05ed64b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      虚拟磁盘精灵/新云软件.url
    • Size 133B
    • SHA256 df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      虚拟磁盘精灵/虚拟磁盘精灵.exe
    • Size 228KB
    • SHA256 0dd740baa539da5ef30092aae99fa17cd470d73a7d5544cff68243628638e39b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks