Overview

overview

8

Static

static

7

f54d8c6b2e...18.exe

windows7-x64

8

f54d8c6b2e...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    f54d8c6b2eb20288921d576c9cd90f38_JaffaCakes118

  • Size

    140KB

  • Sample

    240925-gak54sxgmq

  • MD5

    f54d8c6b2eb20288921d576c9cd90f38

  • SHA1

    c3ae88a7246e0a4b606f4e37a399aa2445bfa316

  • SHA256

    4635fcafeb21b8f0da96e01a1a86725826aef1242cc5090556cf6dd87d49faee

  • SHA512

    0d01f6a32341a1fa27f78c3d52da70b022ab77b0205218506a17c1b947c78a1f8fc168e8aa69493b8b11fc46213b3cf4119e67483ef2d72d728938328a318e2f

  • SSDEEP

    3072:lt+zTFQL1c8uRX5qH/n7trI/SeyAm6a5fT/+CGqnP8tylL/Jxj7:XUFU15unW7NevmDS52kUl7

Score
8/10
discoveryvmprotect

Malware Config

Targets

    • Target

      f54d8c6b2eb20288921d576c9cd90f38_JaffaCakes118

    • Size

      140KB

    • MD5

      f54d8c6b2eb20288921d576c9cd90f38

    • SHA1

      c3ae88a7246e0a4b606f4e37a399aa2445bfa316

    • SHA256

      4635fcafeb21b8f0da96e01a1a86725826aef1242cc5090556cf6dd87d49faee

    • SHA512

      0d01f6a32341a1fa27f78c3d52da70b022ab77b0205218506a17c1b947c78a1f8fc168e8aa69493b8b11fc46213b3cf4119e67483ef2d72d728938328a318e2f

    • SSDEEP

      3072:lt+zTFQL1c8uRX5qH/n7trI/SeyAm6a5fT/+CGqnP8tylL/Jxj7:XUFU15unW7NevmDS52kUl7

    Score
    8/10
    vmprotectdiscovery

    • Modifies RDP port number used by Windows

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks