Overview

overview

7

Static

static

7

d5b17dd80e...18.exe

windows7-x64

7

d5b17dd80e...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d5b17dd80ee7b512709c5b6bf63a4324_JaffaCakes118

  • Size

    112KB

  • Sample

    240909-fppleashjj

  • MD5

    d5b17dd80ee7b512709c5b6bf63a4324

  • SHA1

    09c972ac4e06e1dac53adc2baa09470665179ca6

  • SHA256

    43fb97bd34413e005fa5784ec55dabf3352073e814228befb1b309646d0530a8

  • SHA512

    702ed2c8c5289b659ad938ba4a051e6f0d9de9d012d56b24643c633a6b9f96bbd6604470345116395a9e601e4688bd5ba36a82485ef3ced701c0f06d6e79ae7e

  • SSDEEP

    1536:/+ujRZJif6F2+jHuZRUYfqAi+G0Rf9GLFd9VdYmKV0vu1bQATsSD3zfLAOT0vOD:mujnDjo2aO+G0esVJhRD33AFvE

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      d5b17dd80ee7b512709c5b6bf63a4324_JaffaCakes118

    • Size

      112KB

    • MD5

      d5b17dd80ee7b512709c5b6bf63a4324

    • SHA1

      09c972ac4e06e1dac53adc2baa09470665179ca6

    • SHA256

      43fb97bd34413e005fa5784ec55dabf3352073e814228befb1b309646d0530a8

    • SHA512

      702ed2c8c5289b659ad938ba4a051e6f0d9de9d012d56b24643c633a6b9f96bbd6604470345116395a9e601e4688bd5ba36a82485ef3ced701c0f06d6e79ae7e

    • SSDEEP

      1536:/+ujRZJif6F2+jHuZRUYfqAi+G0Rf9GLFd9VdYmKV0vu1bQATsSD3zfLAOT0vOD:mujnDjo2aO+G0esVJhRD33AFvE

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks