63132e9fc5fbc80c9b6e323baba7a2a5144aec8c802091605b3c01e455cfb917 | Triage

Sharing

General

Target

ad0e01dfe4098db2223419f7ee5b98e5_JaffaCakes118
Size

34KB
Sample

240819-3m3rkswcrj
MD5

ad0e01dfe4098db2223419f7ee5b98e5
SHA1

c6590bd4acbfe291943387d96f9f6eb43e89fd84
SHA256

63132e9fc5fbc80c9b6e323baba7a2a5144aec8c802091605b3c01e455cfb917
SHA512

13716c2b1c4341ad2f0707d9e5d7e5669b7c962bfbe8cc457ffc4db4767326b409e6c89a64ca1630aa62bcaab579fea26ebd51d8d31b2391bfcc0fe29571d56c
SSDEEP

768:OzriYqJ5IT+PlgPUgbbA4JQLUdHuEGJOfvo8UnYqJ59bmHw5LKrO4wgDbD:ek5YIlg8gbc0Qg8Ufa15plgDP

Score

7^/10

discovery vmprotect

Malware Config

Targets

- Target
  
  ad0e01dfe4098db2223419f7ee5b98e5_JaffaCakes118
- Size
  
  34KB
- MD5
  
  ad0e01dfe4098db2223419f7ee5b98e5
- SHA1
  
  c6590bd4acbfe291943387d96f9f6eb43e89fd84
- SHA256
  
  63132e9fc5fbc80c9b6e323baba7a2a5144aec8c802091605b3c01e455cfb917
- SHA512
  
  13716c2b1c4341ad2f0707d9e5d7e5669b7c962bfbe8cc457ffc4db4767326b409e6c89a64ca1630aa62bcaab579fea26ebd51d8d31b2391bfcc0fe29571d56c
- SSDEEP
  
  768:OzriYqJ5IT+PlgPUgbbA4JQLUdHuEGJOfvo8UnYqJ59bmHw5LKrO4wgDbD:ek5YIlg8gbc0Qg8Ufa15plgDP
Score

7^/10

vmprotect discovery
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryvmprotect