Overview

overview

7

Static

static

7

be70956916...18.exe

windows7-x64

7

be70956916...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    be709569169b185e615ee1e51bb460e4_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240824-my7a5sybql

  • MD5

    be709569169b185e615ee1e51bb460e4

  • SHA1

    dc4927fe32dc9e7795dbec753ad8f5ecab66bdec

  • SHA256

    92a72dd92cabbe79c15cc6d4e79384e05f13c4a472fb04eb2d4d7feb2088e617

  • SHA512

    2dbccb1fa4acc630c07ff612ec23bf6e95bae0edfa243b3ca2169a5790ebd7b94da02e5c34a05af0239432806917699745ac6da7b7d6ea028ce8e690cec9474a

  • SSDEEP

    24576:EActqENY7+uDUzN8k/CJ46ePDDx4R3PNqpg:EOENUoXqeh+PUpg

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      be709569169b185e615ee1e51bb460e4_JaffaCakes118

    • Size

      1.4MB

    • MD5

      be709569169b185e615ee1e51bb460e4

    • SHA1

      dc4927fe32dc9e7795dbec753ad8f5ecab66bdec

    • SHA256

      92a72dd92cabbe79c15cc6d4e79384e05f13c4a472fb04eb2d4d7feb2088e617

    • SHA512

      2dbccb1fa4acc630c07ff612ec23bf6e95bae0edfa243b3ca2169a5790ebd7b94da02e5c34a05af0239432806917699745ac6da7b7d6ea028ce8e690cec9474a

    • SSDEEP

      24576:EActqENY7+uDUzN8k/CJ46ePDDx4R3PNqpg:EOENUoXqeh+PUpg

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks