Overview

overview

7

Static

static

7

a85cb12aea...18.exe

windows7-x64

7

a85cb12aea...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a85cb12aeafd113a53f3bd1a4fd8a93e_JaffaCakes118

  • Size

    243KB

  • Sample

    240818-1rr5jazcnn

  • MD5

    a85cb12aeafd113a53f3bd1a4fd8a93e

  • SHA1

    3619f9424d6dc2f299c6aa56996befce4457b44e

  • SHA256

    43b914d4f6aef7bb3cb261c7b920a34cfc6fecf8be46fb4039ed2ec94e088ced

  • SHA512

    70d09113aec4498666789a4117020c26d2018af66e941b501ce93812aa594cad483e25abdba63d847a10aa7510d2af93dbc709e59e38e01a75e8a50944e1473a

  • SSDEEP

    3072:dMgJYY7ZXODyY5WcTjLjs1tLTXdPKOftqPW+P1W7gHMY5ty8xb4MowbouEjUo:dLaH2cjPsPLTXdPKO1XPEnCuQUo

Score
7/10
discoverypersistencevmprotect

Malware Config

Targets

    • Target

      a85cb12aeafd113a53f3bd1a4fd8a93e_JaffaCakes118

    • Size

      243KB

    • MD5

      a85cb12aeafd113a53f3bd1a4fd8a93e

    • SHA1

      3619f9424d6dc2f299c6aa56996befce4457b44e

    • SHA256

      43b914d4f6aef7bb3cb261c7b920a34cfc6fecf8be46fb4039ed2ec94e088ced

    • SHA512

      70d09113aec4498666789a4117020c26d2018af66e941b501ce93812aa594cad483e25abdba63d847a10aa7510d2af93dbc709e59e38e01a75e8a50944e1473a

    • SSDEEP

      3072:dMgJYY7ZXODyY5WcTjLjs1tLTXdPKOftqPW+P1W7gHMY5ty8xb4MowbouEjUo:dLaH2cjPsPLTXdPKO1XPEnCuQUo

    Score
    7/10
    discoverypersistencevmprotect

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks