Overview

overview

9

Static

static

3

fc1c55d846...18.exe

windows7-x64

9

fc1c55d846...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    fc1c55d846ed7494cc8622e55b2d5c3a_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240420-gzxkfaad64

  • MD5

    fc1c55d846ed7494cc8622e55b2d5c3a

  • SHA1

    f078275a46c9ffd1fff50e3202847b222d4fe5f2

  • SHA256

    4855dd71c2a78f7591413ff6549cebeb911e848fabd3ebce62c661d45f7808fb

  • SHA512

    755f1f477a535a79719d46abf3c6180fa21642f71e4480362c127e81e0d1c6ce1fb13bdd0e12cdf8485023ef3a49fb0c3ebcfa5e47c933a95b00058730b1a214

  • SSDEEP

    49152:czjkDkQxS/Yt4CdiNpavbORZv2QHYPKRJtZflMeHv5V:+jkAtzC8NpajO3XHYP2t0eH

Score
9/10
evasion

Malware Config

Targets

    • Target

      fc1c55d846ed7494cc8622e55b2d5c3a_JaffaCakes118

    • Size

      1.9MB

    • MD5

      fc1c55d846ed7494cc8622e55b2d5c3a

    • SHA1

      f078275a46c9ffd1fff50e3202847b222d4fe5f2

    • SHA256

      4855dd71c2a78f7591413ff6549cebeb911e848fabd3ebce62c661d45f7808fb

    • SHA512

      755f1f477a535a79719d46abf3c6180fa21642f71e4480362c127e81e0d1c6ce1fb13bdd0e12cdf8485023ef3a49fb0c3ebcfa5e47c933a95b00058730b1a214

    • SSDEEP

      49152:czjkDkQxS/Yt4CdiNpavbORZv2QHYPKRJtZflMeHv5V:+jkAtzC8NpajO3XHYP2t0eH

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks