Overview

overview

10

Static

static

7

JaffaCakes...b5.exe

windows7-x64

10

JaffaCakes...b5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_ee1601ec6b9ef7f3b330976020f7850ac37ec2b395d4556a93ec431e1decb5b5

  • Size

    652.0MB

  • Sample

    241223-ttn3bsvkfm

  • MD5

    c99c4c3d5514deffea71ee7fd32673ed

  • SHA1

    d5263c86bae0f351a78e0bb2f78e50002104bb62

  • SHA256

    ee1601ec6b9ef7f3b330976020f7850ac37ec2b395d4556a93ec431e1decb5b5

  • SHA512

    3d8f34c6097bbb2b74259fcfb6af1430467d97be962ce81fd03580482027d95a596b525a2148b562d3db098f3c73f7bd5f43198e7d99bbf23692f597ebd7ed4d

  • SSDEEP

    196608:y55H0eo/kBtjRMOYoJe4yBnvbECfjPMtIi8ZAe:yXUe3oVzBjEOrMtIf

Score
10/10
privateloaderloadervmprotect

Malware Config

Targets

    • Target

      JaffaCakes118_ee1601ec6b9ef7f3b330976020f7850ac37ec2b395d4556a93ec431e1decb5b5

    • Size

      652.0MB

    • MD5

      c99c4c3d5514deffea71ee7fd32673ed

    • SHA1

      d5263c86bae0f351a78e0bb2f78e50002104bb62

    • SHA256

      ee1601ec6b9ef7f3b330976020f7850ac37ec2b395d4556a93ec431e1decb5b5

    • SHA512

      3d8f34c6097bbb2b74259fcfb6af1430467d97be962ce81fd03580482027d95a596b525a2148b562d3db098f3c73f7bd5f43198e7d99bbf23692f597ebd7ed4d

    • SSDEEP

      196608:y55H0eo/kBtjRMOYoJe4yBnvbECfjPMtIi8ZAe:yXUe3oVzBjEOrMtIf

    Score
    10/10
    privateloaderloadervmprotect

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

      loaderprivateloader

    • Privateloader family

      privateloader

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks