b7486a4ea9f0ef08b71c9174d1106e7952ac9a44d67baae48344ab5ba8b35d50 | Triage

Submit
Reports

Overview

overview

7

Static

static

5

6f642ff23c...18.exe

windows7-x64

7

6f642ff23c...18.exe

windows10-2004-x64

7

Sharing

General

Target

6f642ff23c41d56617e34d0c00d944ce_JaffaCakes118
Size

100KB
Sample

241023-rs3szsvcpb
MD5

6f642ff23c41d56617e34d0c00d944ce
SHA1

433873a2692fbed861c954701b6287c68d180df2
SHA256

b7486a4ea9f0ef08b71c9174d1106e7952ac9a44d67baae48344ab5ba8b35d50
SHA512

39d0ffd0d80604e2b94c771ea92a338346d754e43cd4b142849c90aa03315dcaebcdf00e9bea35615e8fcd7da94d61b7bde62dafc14c433bf7bcf16bb120ddba
SSDEEP

1536:IOKTlpRC24Ue5QaARuwdtKRnvzM0lOI5m0tvYkLeqjpKVnmTns:IO8xC2DhTYSSvzM0x5m0tv/tpKVnmDs

Score

7^/10

discovery upx vmprotect

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

6f642ff23c41d56617e34d0c00d944ce_JaffaCakes118.exe

Resource

win7-20240708-en

discovery upx vmprotect

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

6f642ff23c41d56617e34d0c00d944ce_JaffaCakes118.exe

Resource

win10v2004-20241007-en

discovery upx vmprotect

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  6f642ff23c41d56617e34d0c00d944ce_JaffaCakes118
- Size
  
  100KB
- MD5
  
  6f642ff23c41d56617e34d0c00d944ce
- SHA1
  
  433873a2692fbed861c954701b6287c68d180df2
- SHA256
  
  b7486a4ea9f0ef08b71c9174d1106e7952ac9a44d67baae48344ab5ba8b35d50
- SHA512
  
  39d0ffd0d80604e2b94c771ea92a338346d754e43cd4b142849c90aa03315dcaebcdf00e9bea35615e8fcd7da94d61b7bde62dafc14c433bf7bcf16bb120ddba
- SSDEEP
  
  1536:IOKTlpRC24Ue5QaARuwdtKRnvzM0lOI5m0tvYkLeqjpKVnmTns:IO8xC2DhTYSSvzM0x5m0tv/tpKVnmDs
Score

7^/10

discovery upx vmprotect
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryupxvmprotect

behavioral2

discoveryupxvmprotect

© 2018-2024

Terms | Privacy