Overview

overview

7

Static

static

7

1ae891a2c4...18.exe

windows7-x64

7

1ae891a2c4...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ae891a2c4d685c7c17a179adf0fc5bf_JaffaCakes118

  • Size

    124KB

  • Sample

    240701-maxrssygkp

  • MD5

    1ae891a2c4d685c7c17a179adf0fc5bf

  • SHA1

    5458844c8ab0ec204194f4999b3558571a1a6ce0

  • SHA256

    57acc0f9e70b26b419e2ab0c3d6eff12c713920410e1f4dd822a7393c79893e4

  • SHA512

    584ef50804d9759d119efdf9e37eb260a45c4c0d491289a52f6f7f13da64bfae7cf21ab6bbf25259327246f6c272954481a48731c4c05cbf0b3e962fbb7c5dbe

  • SSDEEP

    3072:+efy5u7eZQWWTggxD+kjhR+RIXvmhyypVwMdi2igEL8Im43qkP:D7Q32gRkl7e8eVwMdjy4Im43qkP

Score
7/10
upxvmprotect

Malware Config

Targets

    • Target

      1ae891a2c4d685c7c17a179adf0fc5bf_JaffaCakes118

    • Size

      124KB

    • MD5

      1ae891a2c4d685c7c17a179adf0fc5bf

    • SHA1

      5458844c8ab0ec204194f4999b3558571a1a6ce0

    • SHA256

      57acc0f9e70b26b419e2ab0c3d6eff12c713920410e1f4dd822a7393c79893e4

    • SHA512

      584ef50804d9759d119efdf9e37eb260a45c4c0d491289a52f6f7f13da64bfae7cf21ab6bbf25259327246f6c272954481a48731c4c05cbf0b3e962fbb7c5dbe

    • SSDEEP

      3072:+efy5u7eZQWWTggxD+kjhR+RIXvmhyypVwMdi2igEL8Im43qkP:D7Q32gRkl7e8eVwMdjy4Im43qkP

    Score
    7/10
    upxvmprotect

    • Deletes itself

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks