General

  • Target

    737c7053a2ecff238fb51ffa93d99133_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240525-2m4s7sdb41

  • MD5

    737c7053a2ecff238fb51ffa93d99133

  • SHA1

    6a6f5a3558a148d95a8557c2bf5c071870c969e6

  • SHA256

    3be78c6ceec1fe90d23e024d8636003efd3cd58e4359038adeeb46fd481f1082

  • SHA512

    b56f5812ede3443b6d5768622575e6702d58bd2f05ec36780f131679d73a5229433ce725c809a3ab2ff8dfb012e93f486f33a332eafe158e8c5a8df27956585e

  • SSDEEP

    24576:6miiXHd6DK+GrLqrnBuwfnDd9af9ork6GiZDbWMoJR5zU7Ig:6u3EG3Mu8d66N5bWMoj5w7Ig

Score
9/10

Malware Config

Targets

    • Target

      737c7053a2ecff238fb51ffa93d99133_JaffaCakes118

    • Size

      1.1MB

    • MD5

      737c7053a2ecff238fb51ffa93d99133

    • SHA1

      6a6f5a3558a148d95a8557c2bf5c071870c969e6

    • SHA256

      3be78c6ceec1fe90d23e024d8636003efd3cd58e4359038adeeb46fd481f1082

    • SHA512

      b56f5812ede3443b6d5768622575e6702d58bd2f05ec36780f131679d73a5229433ce725c809a3ab2ff8dfb012e93f486f33a332eafe158e8c5a8df27956585e

    • SSDEEP

      24576:6miiXHd6DK+GrLqrnBuwfnDd9af9ork6GiZDbWMoJR5zU7Ig:6u3EG3Mu8d66N5bWMoj5w7Ig

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

MITRE ATT&CK Enterprise v15

Tasks