Overview

overview

7

Static

static

7

a03024bf6c...18.dll

windows7-x64

7

a03024bf6c...18.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a03024bf6ce8f39a9ae08c9470bfe77c_JaffaCakes118

  • Size

    2.0MB

  • Sample

    240816-2eqllsvckl

  • MD5

    a03024bf6ce8f39a9ae08c9470bfe77c

  • SHA1

    c2a7fbacb1dec7047603f7c95b34604f41f09399

  • SHA256

    c7ad4d4f959dd719b5a6926d8c5e47ec03f69ebb78a2270f081321bbd2469f8c

  • SHA512

    a71b4eeb57f309a267f6b561034c4546b62b2f2732915d237c5b8bede19122f880a9796eb80bda864ddc312cf67a065a59dce8fab987fa6d1633464f3f841cd4

  • SSDEEP

    49152:ErRS9baDDMvdk7bm+3AE6iXPhi3R9YevrzIOl:ErRY2DMim+waPhi3lzI

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      a03024bf6ce8f39a9ae08c9470bfe77c_JaffaCakes118

    • Size

      2.0MB

    • MD5

      a03024bf6ce8f39a9ae08c9470bfe77c

    • SHA1

      c2a7fbacb1dec7047603f7c95b34604f41f09399

    • SHA256

      c7ad4d4f959dd719b5a6926d8c5e47ec03f69ebb78a2270f081321bbd2469f8c

    • SHA512

      a71b4eeb57f309a267f6b561034c4546b62b2f2732915d237c5b8bede19122f880a9796eb80bda864ddc312cf67a065a59dce8fab987fa6d1633464f3f841cd4

    • SSDEEP

      49152:ErRS9baDDMvdk7bm+3AE6iXPhi3R9YevrzIOl:ErRY2DMim+waPhi3lzI

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks