Overview

overview

7

Static

static

3

a38733479c...18.exe

windows7-x64

7

a38733479c...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    a38733479c61304edeaabf7077662d93_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240817-welprsybqd

  • MD5

    a38733479c61304edeaabf7077662d93

  • SHA1

    4369fa493f299acbe095cecc74ee3f89feea32cf

  • SHA256

    291df82a028441c32424465013cc15fc398725729d76df9c17d0a0d76d3ab554

  • SHA512

    421451b35b098137915201ecff9e85e34ad845a2e7b7b8456c9b8b954d606dc8ea812f3f4c8d579959c1f9c29a19c2a4b42a297aeb10d4a142908de15a5cc9ac

  • SSDEEP

    98304:vyiB/f4m1fGBp1QjPCV+yi3ribcjqXZzLm/FettSVyfl5kHXsPgPvH56XYHTlxM0:jfJG8Dyi3rccA/mHVUmXsPKvHbpOFeH

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      a38733479c61304edeaabf7077662d93_JaffaCakes118

    • Size

      5.0MB

    • MD5

      a38733479c61304edeaabf7077662d93

    • SHA1

      4369fa493f299acbe095cecc74ee3f89feea32cf

    • SHA256

      291df82a028441c32424465013cc15fc398725729d76df9c17d0a0d76d3ab554

    • SHA512

      421451b35b098137915201ecff9e85e34ad845a2e7b7b8456c9b8b954d606dc8ea812f3f4c8d579959c1f9c29a19c2a4b42a297aeb10d4a142908de15a5cc9ac

    • SSDEEP

      98304:vyiB/f4m1fGBp1QjPCV+yi3ribcjqXZzLm/FettSVyfl5kHXsPgPvH56XYHTlxM0:jfJG8Dyi3rccA/mHVUmXsPKvHbpOFeH

    Score
    7/10
    discoveryvmprotect

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks