Overview

overview

10

Static

static

3

fceeac59ef...18.exe

windows7-x64

10

fceeac59ef...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fceeac59ef6d2c8c64625d57491b0a7e_JaffaCakes118

  • Size

    1.9MB

  • Sample

    240420-rfxffaah6v

  • MD5

    fceeac59ef6d2c8c64625d57491b0a7e

  • SHA1

    beddc6e23b89cdb6fb2e8790e1c8a19508d6f95f

  • SHA256

    76bdc2f9959a391d312138b82ad3f1abb9221935b56df16dd9d0d75f7b32f9d6

  • SHA512

    46d5d9efbc88e07c1c4709d6c91eeb3fed24985225089776cdcd40dba4ffbfff3e93227a9c3e1d6784b51ae6f7398be834c8f7c7a97ebc614c2e48ad8d04c896

  • SSDEEP

    49152:ISlNHydXboE+2pKWTvP6p9kB/GS0fsXCFa:ISjydNCYn0+h

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      fceeac59ef6d2c8c64625d57491b0a7e_JaffaCakes118

    • Size

      1.9MB

    • MD5

      fceeac59ef6d2c8c64625d57491b0a7e

    • SHA1

      beddc6e23b89cdb6fb2e8790e1c8a19508d6f95f

    • SHA256

      76bdc2f9959a391d312138b82ad3f1abb9221935b56df16dd9d0d75f7b32f9d6

    • SHA512

      46d5d9efbc88e07c1c4709d6c91eeb3fed24985225089776cdcd40dba4ffbfff3e93227a9c3e1d6784b51ae6f7398be834c8f7c7a97ebc614c2e48ad8d04c896

    • SSDEEP

      49152:ISlNHydXboE+2pKWTvP6p9kB/GS0fsXCFa:ISjydNCYn0+h

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks