Overview

overview

8

Static

static

7

dd29311c0e...18.exe

windows7-x64

8

dd29311c0e...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    dd29311c0eec6f861161f45e7961e2d3_JaffaCakes118

  • Size

    651KB

  • Sample

    240912-2dv5psybrk

  • MD5

    dd29311c0eec6f861161f45e7961e2d3

  • SHA1

    041cadb471e96e910731e949b453ceaf7e6d7631

  • SHA256

    1bf4aa43bc33b2143a43f9b6deb738359367a1297767d496f605be7e8c2f1f98

  • SHA512

    8de3497c70babf5d2cc4345197d36ce14ab96590297fac5d6b419ca2f5f15478ec5a39c2182be8cfb208b12590cbb845f2b9c0ac9f0bd98238295e1ce5fdccf1

  • SSDEEP

    12288:K7I/asQMNK2de9oiLcsmcQ6RIlReHfLquc+2E59T42IVqe6:K7IZz0oiTmcQ9Ruc+pE2IVqd

Score
8/10
discoveryvmprotect

Malware Config

Targets

    • Target

      dd29311c0eec6f861161f45e7961e2d3_JaffaCakes118

    • Size

      651KB

    • MD5

      dd29311c0eec6f861161f45e7961e2d3

    • SHA1

      041cadb471e96e910731e949b453ceaf7e6d7631

    • SHA256

      1bf4aa43bc33b2143a43f9b6deb738359367a1297767d496f605be7e8c2f1f98

    • SHA512

      8de3497c70babf5d2cc4345197d36ce14ab96590297fac5d6b419ca2f5f15478ec5a39c2182be8cfb208b12590cbb845f2b9c0ac9f0bd98238295e1ce5fdccf1

    • SSDEEP

      12288:K7I/asQMNK2de9oiLcsmcQ6RIlReHfLquc+2E59T42IVqe6:K7IZz0oiTmcQ9Ruc+pE2IVqd

    Score
    8/10
    discoveryvmprotect

    • Drops file in Drivers directory

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks