Overview

overview

7

Static

static

7

eab20a00ea...18.exe

windows7-x64

7

eab20a00ea...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eab20a00ead7b56a037f844ab2c21b26_JaffaCakes118

  • Size

    56KB

  • Sample

    240919-gfyy6atcpd

  • MD5

    eab20a00ead7b56a037f844ab2c21b26

  • SHA1

    714df49658665cb92c6c3fd0317e26133fe6553e

  • SHA256

    215fadf1c5c1228cbc76e8edbefad21bf9270d3652218116c78170f50c2b2909

  • SHA512

    cf562a06724f5dd01adff3b5310e068a48f3bfa51d834221b239482d6bee0f389bd133de097423052b4d3ea57c5b0d41221d2749b2487d47bab5e25324bc23e9

  • SSDEEP

    1536:yG2ZAsUH6glNbv5+JDZza3BR8Coi+fEfA4e9IB:yG2AsUH6SbvAwx4z/9U

Score
7/10
discoverypersistencevmprotect

Malware Config

Targets

    • Target

      eab20a00ead7b56a037f844ab2c21b26_JaffaCakes118

    • Size

      56KB

    • MD5

      eab20a00ead7b56a037f844ab2c21b26

    • SHA1

      714df49658665cb92c6c3fd0317e26133fe6553e

    • SHA256

      215fadf1c5c1228cbc76e8edbefad21bf9270d3652218116c78170f50c2b2909

    • SHA512

      cf562a06724f5dd01adff3b5310e068a48f3bfa51d834221b239482d6bee0f389bd133de097423052b4d3ea57c5b0d41221d2749b2487d47bab5e25324bc23e9

    • SSDEEP

      1536:yG2ZAsUH6glNbv5+JDZza3BR8Coi+fEfA4e9IB:yG2AsUH6SbvAwx4z/9U

    Score
    7/10
    discoverypersistencevmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks