Overview

overview

7

Static

static

7

6e89856225...18.exe

windows7-x64

7

6e89856225...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e898562255c4ce1c963e6d8c87e2cff_JaffaCakes118

  • Size

    664KB

  • Sample

    241023-m3b1ssyakp

  • MD5

    6e898562255c4ce1c963e6d8c87e2cff

  • SHA1

    9531eb4628728bbef43464a62279da6e24e48d66

  • SHA256

    ecb6cf7b5928440e5d685f2cc30a6cbfd304bb2cb881336ef1fe246dc099e5c1

  • SHA512

    6124b37602c7759f3e15cf9bfc4ff77f0dc7509446f97771eba06ec65fb97356e0df858902f6c20ed00d9ccd24de53bc596865454f80c96d71a7b2d1746b684b

  • SSDEEP

    12288:QyuWcROfYOyVYwZQbdXoTqbPROt+kk+or7RAp+6246u5cEJfsw5/5h/rVrmX:QyERBWw8XoB/k+4lAsf4T5nV/5H

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      6e898562255c4ce1c963e6d8c87e2cff_JaffaCakes118

    • Size

      664KB

    • MD5

      6e898562255c4ce1c963e6d8c87e2cff

    • SHA1

      9531eb4628728bbef43464a62279da6e24e48d66

    • SHA256

      ecb6cf7b5928440e5d685f2cc30a6cbfd304bb2cb881336ef1fe246dc099e5c1

    • SHA512

      6124b37602c7759f3e15cf9bfc4ff77f0dc7509446f97771eba06ec65fb97356e0df858902f6c20ed00d9ccd24de53bc596865454f80c96d71a7b2d1746b684b

    • SSDEEP

      12288:QyuWcROfYOyVYwZQbdXoTqbPROt+kk+or7RAp+6246u5cEJfsw5/5h/rVrmX:QyERBWw8XoB/k+4lAsf4T5nV/5H

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks