Overview

overview

7

Static

static

7

c7b047d8d7...18.dll

windows7-x64

7

c7b047d8d7...18.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c7b047d8d7ab6fa2de2890ccc453ec52_JaffaCakes118

  • Size

    444KB

  • Sample

    240828-1eskjaxcmg

  • MD5

    c7b047d8d7ab6fa2de2890ccc453ec52

  • SHA1

    02b48e8950a7f357088b288b3d1625087c257e27

  • SHA256

    2ea1de232fa39b6f175f9ddb3675dd997baacf9251a87e9d3e0462122b61684f

  • SHA512

    926037d21c6b83e1c899926d3220c6ef33490d38346bc9418697312b622e0b6c87ae55e7f742c5c6c3e0f8e515cc9266d615e8380aca806009a7c4caaafec98b

  • SSDEEP

    12288:0B9ufEwGYjoELKQTvmo3tHugqMziKJpbYxpc:0B9uyaLKQLm4tHu+z1JpbYL

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      c7b047d8d7ab6fa2de2890ccc453ec52_JaffaCakes118

    • Size

      444KB

    • MD5

      c7b047d8d7ab6fa2de2890ccc453ec52

    • SHA1

      02b48e8950a7f357088b288b3d1625087c257e27

    • SHA256

      2ea1de232fa39b6f175f9ddb3675dd997baacf9251a87e9d3e0462122b61684f

    • SHA512

      926037d21c6b83e1c899926d3220c6ef33490d38346bc9418697312b622e0b6c87ae55e7f742c5c6c3e0f8e515cc9266d615e8380aca806009a7c4caaafec98b

    • SSDEEP

      12288:0B9ufEwGYjoELKQTvmo3tHugqMziKJpbYxpc:0B9uyaLKQLm4tHu+z1JpbYL

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks