Overview

overview

7

Static

static

7

c8eb4d5fa9...18.exe

windows7-x64

7

c8eb4d5fa9...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c8eb4d5fa949217dfe3fd55dc34f6e7b_JaffaCakes118

  • Size

    124KB

  • Sample

    240829-qvs6wswdrl

  • MD5

    c8eb4d5fa949217dfe3fd55dc34f6e7b

  • SHA1

    382da311eed1f4a2644e25acbb7190065c5ce2b5

  • SHA256

    4390fbb58ce7b22fa7091b22ce49aa4924aff1528efc47d9e3e76b9676a19c74

  • SHA512

    6a77aec23900a4e1d8104b04fc460e6302ca29d262d960d08a22cf2da9bb158399b8cb3fd0941a317718dba4f45332ad40c91736d5b286ebac7b81ed11815a53

  • SSDEEP

    3072:dqyxh2vQuMGFd8abUtKqoYtxECX7T3cmwcSxH9dCO:drIQ8F6aotKqdtxRT3cO

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      c8eb4d5fa949217dfe3fd55dc34f6e7b_JaffaCakes118

    • Size

      124KB

    • MD5

      c8eb4d5fa949217dfe3fd55dc34f6e7b

    • SHA1

      382da311eed1f4a2644e25acbb7190065c5ce2b5

    • SHA256

      4390fbb58ce7b22fa7091b22ce49aa4924aff1528efc47d9e3e76b9676a19c74

    • SHA512

      6a77aec23900a4e1d8104b04fc460e6302ca29d262d960d08a22cf2da9bb158399b8cb3fd0941a317718dba4f45332ad40c91736d5b286ebac7b81ed11815a53

    • SSDEEP

      3072:dqyxh2vQuMGFd8abUtKqoYtxECX7T3cmwcSxH9dCO:drIQ8F6aotKqdtxRT3cO

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks