Overview

overview

7

Static

static

3

d2337e6ece...18.exe

windows7-x64

7

d2337e6ece...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d2337e6eceb950ba3db65d840ce46bc1_JaffaCakes118

  • Size

    308KB

  • Sample

    240907-scamya1fmf

  • MD5

    d2337e6eceb950ba3db65d840ce46bc1

  • SHA1

    088fe47d7b22f1c3764f0183f0f4f28d8f69e8f6

  • SHA256

    253aba1303f3def6ba81c09b7fdd1a9c0b3d3caad5919a3c79ab7e45f426925e

  • SHA512

    d1468addb5c9ad612f8db93b4b105c1c065f7825290a3a050f9362cdbe1ec3fdeb59b6adb63263b6aaf9160e81bc110af668c2f3574812166aaba112f4668c71

  • SSDEEP

    6144:v4RFDmLzNZVazYloL8cKCXTq3vI1fJxUsmoAD0G:QRFDmH3VTchxUxoAD3

Score
7/10
aspackv2discoveryvmprotect

Malware Config

Targets

    • Target

      d2337e6eceb950ba3db65d840ce46bc1_JaffaCakes118

    • Size

      308KB

    • MD5

      d2337e6eceb950ba3db65d840ce46bc1

    • SHA1

      088fe47d7b22f1c3764f0183f0f4f28d8f69e8f6

    • SHA256

      253aba1303f3def6ba81c09b7fdd1a9c0b3d3caad5919a3c79ab7e45f426925e

    • SHA512

      d1468addb5c9ad612f8db93b4b105c1c065f7825290a3a050f9362cdbe1ec3fdeb59b6adb63263b6aaf9160e81bc110af668c2f3574812166aaba112f4668c71

    • SSDEEP

      6144:v4RFDmLzNZVazYloL8cKCXTq3vI1fJxUsmoAD0G:QRFDmH3VTchxUxoAD3

    Score
    7/10
    aspackv2discoveryvmprotect

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks