Overview

overview

7

Static

static

7

95b9d2f19e...18.exe

windows7-x64

7

95b9d2f19e...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95b9d2f19e8fa5760c89168372e7ff4f_JaffaCakes118

  • Size

    68KB

  • Sample

    240814-mlkxdascjl

  • MD5

    95b9d2f19e8fa5760c89168372e7ff4f

  • SHA1

    f0cab7a7ece67d7ab394ce7423973209032feb2c

  • SHA256

    4f28a91c2c36e86cdb3cd97d81803178b6d28a6415f959966c93562dd3edfb9d

  • SHA512

    b65625c5799780d6c9d457e718d1554933cdd4c8b2f80f16b52eebc43e529b6fc297fdfdf220c8f29d61918a9d67a681d4a8d49d0b911e972e367fce9722b9d0

  • SSDEEP

    1536:7g0PIfN/Zqt4d2MudViK379zcqhTMbXdC4FleoYhAZmvGeTE:7h+RA4c/3T3Bzcq5szeoWAZ6TE

Score
7/10
defense_evasiondiscoveryvmprotect

Malware Config

Targets

    • Target

      95b9d2f19e8fa5760c89168372e7ff4f_JaffaCakes118

    • Size

      68KB

    • MD5

      95b9d2f19e8fa5760c89168372e7ff4f

    • SHA1

      f0cab7a7ece67d7ab394ce7423973209032feb2c

    • SHA256

      4f28a91c2c36e86cdb3cd97d81803178b6d28a6415f959966c93562dd3edfb9d

    • SHA512

      b65625c5799780d6c9d457e718d1554933cdd4c8b2f80f16b52eebc43e529b6fc297fdfdf220c8f29d61918a9d67a681d4a8d49d0b911e972e367fce9722b9d0

    • SSDEEP

      1536:7g0PIfN/Zqt4d2MudViK379zcqhTMbXdC4FleoYhAZmvGeTE:7h+RA4c/3T3Bzcq5szeoWAZ6TE

    Score
    7/10
    defense_evasiondiscoveryvmprotect

    • Deletes itself

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks