Overview

overview

9

Static

static

3

ebdb446410...18.exe

windows7-x64

9

ebdb446410...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    ebdb4464103b5c7827c67bc5cb854c9e_JaffaCakes118

  • Size

    675KB

  • Sample

    240410-yjes5ahg92

  • MD5

    ebdb4464103b5c7827c67bc5cb854c9e

  • SHA1

    6ec7bbfe8fa3c295e672e00e3c71fa115650a9b9

  • SHA256

    2cfad80b48ead20a58614c9c111e7064eadc00e5a0f1753de5b1c4a2afb9f3f1

  • SHA512

    0e576964adce2434a64d31f6953bb2ac540bb8c323de4a304db1ccd75a03c16957df355f6621f979cae30dc4396197fc7c3ee0ec16ff6241646f1f48a71a5aba

  • SSDEEP

    12288:uf63OmNpfnBouDQEj5LMBc3hQO2/ZukVKTwJXXjVx+hzaLGJvIAYgZxo9p:c6+mXBomVLMBrXFKTwFjV0V6cQh0Ap

Score
9/10
evasion

Malware Config

Targets

    • Target

      ebdb4464103b5c7827c67bc5cb854c9e_JaffaCakes118

    • Size

      675KB

    • MD5

      ebdb4464103b5c7827c67bc5cb854c9e

    • SHA1

      6ec7bbfe8fa3c295e672e00e3c71fa115650a9b9

    • SHA256

      2cfad80b48ead20a58614c9c111e7064eadc00e5a0f1753de5b1c4a2afb9f3f1

    • SHA512

      0e576964adce2434a64d31f6953bb2ac540bb8c323de4a304db1ccd75a03c16957df355f6621f979cae30dc4396197fc7c3ee0ec16ff6241646f1f48a71a5aba

    • SSDEEP

      12288:uf63OmNpfnBouDQEj5LMBc3hQO2/ZukVKTwJXXjVx+hzaLGJvIAYgZxo9p:c6+mXBomVLMBrXFKTwFjV0V6cQh0Ap

    Score
    9/10
    evasion

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks