Overview

overview

10

Static

static

7

JaffaCakes...f8.exe

windows7-x64

10

JaffaCakes...f8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6d0d02d23acb1d9763c183bd2a2c5791af4c64964262af241c716b2edcd2d1f8

  • Size

    655.0MB

  • Sample

    241230-gzg5razreq

  • MD5

    3c579d601ce3840afad9bbbf3b720ae3

  • SHA1

    e29a2f27111e4fe3342ef19a7269a031957b7a62

  • SHA256

    6d0d02d23acb1d9763c183bd2a2c5791af4c64964262af241c716b2edcd2d1f8

  • SHA512

    3d4893cbb4b0b0bc91c390a8462f537eaa5c7f3bc45bdfa1a16380371108fefa1db920ebba6b8c3038071b78ae281d35e22368ca334b6bf2bfdda19d900bd1ac

  • SSDEEP

    98304:h2PrQwDV4h9PCR7dYskHmyA8dVZQFWTzIDalBsH4XiupIwaLXu8sFppzv:h2PtV4bPCNdYsCACVZR4DalBVX30SLp

Score
10/10
privateloaderloadervmprotect

Malware Config

Targets

    • Target

      JaffaCakes118_6d0d02d23acb1d9763c183bd2a2c5791af4c64964262af241c716b2edcd2d1f8

    • Size

      655.0MB

    • MD5

      3c579d601ce3840afad9bbbf3b720ae3

    • SHA1

      e29a2f27111e4fe3342ef19a7269a031957b7a62

    • SHA256

      6d0d02d23acb1d9763c183bd2a2c5791af4c64964262af241c716b2edcd2d1f8

    • SHA512

      3d4893cbb4b0b0bc91c390a8462f537eaa5c7f3bc45bdfa1a16380371108fefa1db920ebba6b8c3038071b78ae281d35e22368ca334b6bf2bfdda19d900bd1ac

    • SSDEEP

      98304:h2PrQwDV4h9PCR7dYskHmyA8dVZQFWTzIDalBsH4XiupIwaLXu8sFppzv:h2PtV4bPCNdYsCACVZR4DalBVX30SLp

    Score
    10/10
    privateloaderloadervmprotect

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

      loaderprivateloader

    • Privateloader family

      privateloader

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks