Overview

overview

7

Static

static

1

69253ab26a...18.exe

windows7-x64

7

69253ab26a...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69253ab26a7f5c79cb292a82ee3eb59b_JaffaCakes118

  • Size

    689KB

  • Sample

    240523-asyetseh76

  • MD5

    69253ab26a7f5c79cb292a82ee3eb59b

  • SHA1

    50e860e691e9f4d33a119c5a054e4c460e895cdf

  • SHA256

    520e03754bb0a5febe916a2d700fe3267548e1efc70e252d974326b3ab4d0d11

  • SHA512

    e821bb0e008d94ece575af1393134bb66429f0b42fe924a98269ce9608b44e40bfffe9e8c4bb45f240623d816fac8fe0ed223e25ffaacf6d32341409fa777012

  • SSDEEP

    12288:rMGU99p82TL5WXv0Be53AXTNMwmTfumY+7rP8db1+Q/WCjVF6WjXKSa:Az99pU0Be5wXTNMwmT0+7wf9WcVdXKP

Score
7/10
discovery

Malware Config

Targets

    • Target

      69253ab26a7f5c79cb292a82ee3eb59b_JaffaCakes118

    • Size

      689KB

    • MD5

      69253ab26a7f5c79cb292a82ee3eb59b

    • SHA1

      50e860e691e9f4d33a119c5a054e4c460e895cdf

    • SHA256

      520e03754bb0a5febe916a2d700fe3267548e1efc70e252d974326b3ab4d0d11

    • SHA512

      e821bb0e008d94ece575af1393134bb66429f0b42fe924a98269ce9608b44e40bfffe9e8c4bb45f240623d816fac8fe0ed223e25ffaacf6d32341409fa777012

    • SSDEEP

      12288:rMGU99p82TL5WXv0Be53AXTNMwmTfumY+7rP8db1+Q/WCjVF6WjXKSa:Az99pU0Be5wXTNMwmT0+7wf9WcVdXKP

    Score
    7/10
    discovery

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks