Overview

overview

7

Static

static

1

4f7ff49118...18.exe

windows7-x64

7

4f7ff49118...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4f7ff49118c2ccccca4aa97cb4c31e90_JaffaCakes118

  • Size

    597KB

  • Sample

    240517-l9x16sdf28

  • MD5

    4f7ff49118c2ccccca4aa97cb4c31e90

  • SHA1

    dc925ed1f65341d089390b9f3232a482f983f8cf

  • SHA256

    50db7ad06afa18a8353c607f60221bd43e4dd9cd2a2822ddddbfbc1ca186b0de

  • SHA512

    3322e7122a8f74253aad15a772d9470d33680a18e41564970c5d3f85e251ac8ddc13321f2c5009d97b7a82e6aa52ddb1a35d6b0314219cd9249593626fba4a5a

  • SSDEEP

    12288:Wnp7MTrnNc4cMCEASQPCnXYjCsCutCfAIh+ww3dm:WpITTNcmkS0CnIjoNhatm

Score
7/10
discovery

Malware Config

Targets

    • Target

      4f7ff49118c2ccccca4aa97cb4c31e90_JaffaCakes118

    • Size

      597KB

    • MD5

      4f7ff49118c2ccccca4aa97cb4c31e90

    • SHA1

      dc925ed1f65341d089390b9f3232a482f983f8cf

    • SHA256

      50db7ad06afa18a8353c607f60221bd43e4dd9cd2a2822ddddbfbc1ca186b0de

    • SHA512

      3322e7122a8f74253aad15a772d9470d33680a18e41564970c5d3f85e251ac8ddc13321f2c5009d97b7a82e6aa52ddb1a35d6b0314219cd9249593626fba4a5a

    • SSDEEP

      12288:Wnp7MTrnNc4cMCEASQPCnXYjCsCutCfAIh+ww3dm:WpITTNcmkS0CnIjoNhatm

    Score
    7/10
    discovery

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks