Overview

overview

7

Static

static

1

1616c6a33b...18.exe

windows7-x64

7

1616c6a33b...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1616c6a33b3a17a83388b112f10a815d_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240505-fndgrafg7z

  • MD5

    1616c6a33b3a17a83388b112f10a815d

  • SHA1

    8fa444aa4d7f92a128ed0d86a3745ad3aa8e6039

  • SHA256

    11211999630726dee101c07875ee32c4cddbcafe64ac9eec70c3c9adcc9b526f

  • SHA512

    b66c9fc1063bb66eabea09097bab426bc4ac3b1b5e3606dd1935170a9d26ed1c3f7dd94857c537529b4609b8d24d6c980d57168fbf7c909096243cfcf8596c63

  • SSDEEP

    24576:LCStj/R+pud1sQN6TgXxruXQNjj43/qqy:tr0C/5XIANvMy

Score
7/10
discovery

Malware Config

Targets

    • Target

      1616c6a33b3a17a83388b112f10a815d_JaffaCakes118

    • Size

      1.2MB

    • MD5

      1616c6a33b3a17a83388b112f10a815d

    • SHA1

      8fa444aa4d7f92a128ed0d86a3745ad3aa8e6039

    • SHA256

      11211999630726dee101c07875ee32c4cddbcafe64ac9eec70c3c9adcc9b526f

    • SHA512

      b66c9fc1063bb66eabea09097bab426bc4ac3b1b5e3606dd1935170a9d26ed1c3f7dd94857c537529b4609b8d24d6c980d57168fbf7c909096243cfcf8596c63

    • SSDEEP

      24576:LCStj/R+pud1sQN6TgXxruXQNjj43/qqy:tr0C/5XIANvMy

    Score
    7/10
    discovery

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks