Overview

overview

7

Static

static

7

6f5f9b8e0e...18.exe

windows7-x64

7

6f5f9b8e0e...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6f5f9b8e0e83e40ae45cf912914a3a7d_JaffaCakes118

  • Size

    736KB

  • Sample

    241023-rpzl6avbkd

  • MD5

    6f5f9b8e0e83e40ae45cf912914a3a7d

  • SHA1

    fc213ad6c35c9c8fa1cdc2b03eaf7f19821ae80f

  • SHA256

    a73a15e0af2ae6e9a15f0855017b1e08814641bcba15ca608d4642432c69aa56

  • SHA512

    3ec3a901b00e26a0157df3a29dd7bce65c7f86cddd051f340fd421c44ccafe9a80159c72b962a592542482a6aab616cd6232351bedbd2604ac72959303ea822b

  • SSDEEP

    12288:+vgUk4xZRhCSkWLiNq6dnE9XovM2r8a4iv/x6zroPuxVaK/nMtc:+vgUfx/hCSJLUqWGOrh4iv/x/m4K/Mtc

Score
7/10
discoveryvmprotect

Malware Config

Targets

    • Target

      6f5f9b8e0e83e40ae45cf912914a3a7d_JaffaCakes118

    • Size

      736KB

    • MD5

      6f5f9b8e0e83e40ae45cf912914a3a7d

    • SHA1

      fc213ad6c35c9c8fa1cdc2b03eaf7f19821ae80f

    • SHA256

      a73a15e0af2ae6e9a15f0855017b1e08814641bcba15ca608d4642432c69aa56

    • SHA512

      3ec3a901b00e26a0157df3a29dd7bce65c7f86cddd051f340fd421c44ccafe9a80159c72b962a592542482a6aab616cd6232351bedbd2604ac72959303ea822b

    • SSDEEP

      12288:+vgUk4xZRhCSkWLiNq6dnE9XovM2r8a4iv/x6zroPuxVaK/nMtc:+vgUfx/hCSJLUqWGOrh4iv/x/m4K/Mtc

    Score
    7/10
    discoveryvmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks