Overview

overview

10

Static

static

7

e2619d3187...18.exe

windows7-x64

10

e2619d3187...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e2619d318769f7e007300bba76d9e0bf_JaffaCakes118

  • Size

    71KB

  • Sample

    240915-nm2f7a1gkh

  • MD5

    e2619d318769f7e007300bba76d9e0bf

  • SHA1

    b5d0c0b021ec8a4cee05474a9610a87b60815e0e

  • SHA256

    5edea6a4c9c43a516b21126d21f02bca8975263305bdaebe1d2a54d0d2ff4061

  • SHA512

    d83834cc29a4685b84bab57aaaa98b95f96f88e3b0693c45234d280ef9f9560c767a918f900feef48c21be40c04202d48f2ccafd983ed3ea57430f35842d0f84

  • SSDEEP

    1536:t+FqtcxASa3L64VOrjMxBYJbUdCfCzyW/DeWFrrl:8cXOk+JfO2WZr

Score
10/10
discoveryevasionexecutionvmprotect

Malware Config

Targets

    • Target

      e2619d318769f7e007300bba76d9e0bf_JaffaCakes118

    • Size

      71KB

    • MD5

      e2619d318769f7e007300bba76d9e0bf

    • SHA1

      b5d0c0b021ec8a4cee05474a9610a87b60815e0e

    • SHA256

      5edea6a4c9c43a516b21126d21f02bca8975263305bdaebe1d2a54d0d2ff4061

    • SHA512

      d83834cc29a4685b84bab57aaaa98b95f96f88e3b0693c45234d280ef9f9560c767a918f900feef48c21be40c04202d48f2ccafd983ed3ea57430f35842d0f84

    • SSDEEP

      1536:t+FqtcxASa3L64VOrjMxBYJbUdCfCzyW/DeWFrrl:8cXOk+JfO2WZr

    Score
    10/10
    discoveryevasionexecutionvmprotect

    • Disables service(s)

      evasionexecution

    • Drops file in Drivers directory

    • Loads dropped DLL

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks