Overview

overview

9

Static

static

7

e9603eff1f...18.exe

windows7-x64

9

e9603eff1f...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e9603eff1fd11bf75e8ebcd25c20e0d0_JaffaCakes118

  • Size

    2.8MB

  • Sample

    240409-gl2bgabf3x

  • MD5

    e9603eff1fd11bf75e8ebcd25c20e0d0

  • SHA1

    8122768889fcaa3eb7b5bfca45806a1cf84578fc

  • SHA256

    772814c11739d2583083414e693964ed7a2167ac61339cdfad344a656ed2b841

  • SHA512

    a3147658f9e7b07d11653d75b53b3abcf1a6c2b5076e09cf82f60449e1aae8f346c0655d16068538abfcd2810c36c93facf36d8e47c2c7b9627191d5346ec591

  • SSDEEP

    49152:sJ9+HQ0UnyvfYaALpW6ucDFFPwH8tAMfJ4tL3VGS1GmsoYeF5D4utupKBl:saHQ0pYtLpW9oCHM5fJ45lV1GmsbqMNm

Score
9/10
evasionthemidatrojan

Malware Config

Targets

    • Target

      e9603eff1fd11bf75e8ebcd25c20e0d0_JaffaCakes118

    • Size

      2.8MB

    • MD5

      e9603eff1fd11bf75e8ebcd25c20e0d0

    • SHA1

      8122768889fcaa3eb7b5bfca45806a1cf84578fc

    • SHA256

      772814c11739d2583083414e693964ed7a2167ac61339cdfad344a656ed2b841

    • SHA512

      a3147658f9e7b07d11653d75b53b3abcf1a6c2b5076e09cf82f60449e1aae8f346c0655d16068538abfcd2810c36c93facf36d8e47c2c7b9627191d5346ec591

    • SSDEEP

      49152:sJ9+HQ0UnyvfYaALpW6ucDFFPwH8tAMfJ4tL3VGS1GmsoYeF5D4utupKBl:saHQ0pYtLpW9oCHM5fJ45lV1GmsbqMNm

    Score
    9/10
    evasionthemidatrojan

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks