Overview

overview

7

Static

static

7

d52ea7cd8b...18.exe

windows7-x64

7

d52ea7cd8b...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d52ea7cd8b01aac3ff6ae47dda58a1e9_JaffaCakes118

  • Size

    720KB

  • Sample

    240908-16jrpszhpb

  • MD5

    d52ea7cd8b01aac3ff6ae47dda58a1e9

  • SHA1

    a4de8d095e5ab1976a2b046c6eeeb795f304674d

  • SHA256

    d034f148c4687a2fb3162714ab65af552e5fa42b7ea659e1993c6773c308be05

  • SHA512

    8216aa4d2b349ad5263333a0654ecd85d164e1047407c63e3909beab5b2c802e6366b668a62caeb1e468a8de31d14640a692bb9254318bb265a508b30a8cd3fa

  • SSDEEP

    12288:vscNaMP252lkD/AVhi8WDY5JxHYqfCt2m4TNC9T9ACuoN5DvG6Tbdi7s7U0paGWY:vpUMezX8WU3xHYUs25sT9Aw7TD6sgTW7

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      d52ea7cd8b01aac3ff6ae47dda58a1e9_JaffaCakes118

    • Size

      720KB

    • MD5

      d52ea7cd8b01aac3ff6ae47dda58a1e9

    • SHA1

      a4de8d095e5ab1976a2b046c6eeeb795f304674d

    • SHA256

      d034f148c4687a2fb3162714ab65af552e5fa42b7ea659e1993c6773c308be05

    • SHA512

      8216aa4d2b349ad5263333a0654ecd85d164e1047407c63e3909beab5b2c802e6366b668a62caeb1e468a8de31d14640a692bb9254318bb265a508b30a8cd3fa

    • SSDEEP

      12288:vscNaMP252lkD/AVhi8WDY5JxHYqfCt2m4TNC9T9ACuoN5DvG6Tbdi7s7U0paGWY:vpUMezX8WU3xHYUs25sT9Aw7TD6sgTW7

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks