Overview

overview

9

Static

static

3

765ed4b1c3...18.exe

windows7-x64

9

765ed4b1c3...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    765ed4b1c3fee83276b7fb656a7e6b78_JaffaCakes118
  • Size 3.8MB
  • Sample240526-ws6xvsfa2z
  • SHA256 161ffedb4a329bcb8a952123580077d9f3f2c43e9cc77233c30e708916a6fe64
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10
evasionupx

Malware Config

Targets

    • Target
      765ed4b1c3fee83276b7fb656a7e6b78_JaffaCakes118
    • Size 3.8MB
    • SHA256 161ffedb4a329bcb8a952123580077d9f3f2c43e9cc77233c30e708916a6fe64
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    evasionupx

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks