Overview

overview

7

Static

static

1

867959b94e...18.exe

windows7-x64

7

867959b94e...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    867959b94e494641741054d20b2326da_JaffaCakes118

  • Size

    853KB

  • Sample

    240531-k3cafsda8x

  • MD5

    867959b94e494641741054d20b2326da

  • SHA1

    d1cfbf8f1c1e697a92787c542fee28c5c633195d

  • SHA256

    573944aa1cd9a0de250480a849b75b7a2c199296dfeb7ac34175834744b5843c

  • SHA512

    1e8d80304caf75387433f39dd048a38cadb8bfff85b94675d417f40d590a958835919405c3ea4ad3446919dcd518604dbc50df055d62dbc452830badbf78c73e

  • SSDEEP

    24576:1Yq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvt:mqaxyDC2JmSoPvikO8t

Score
7/10

Malware Config

Targets

    • Target

      867959b94e494641741054d20b2326da_JaffaCakes118

    • Size

      853KB

    • MD5

      867959b94e494641741054d20b2326da

    • SHA1

      d1cfbf8f1c1e697a92787c542fee28c5c633195d

    • SHA256

      573944aa1cd9a0de250480a849b75b7a2c199296dfeb7ac34175834744b5843c

    • SHA512

      1e8d80304caf75387433f39dd048a38cadb8bfff85b94675d417f40d590a958835919405c3ea4ad3446919dcd518604dbc50df055d62dbc452830badbf78c73e

    • SSDEEP

      24576:1Yq2/9nnr5cDNsOQfKJL9ki1arPvi/cjaBYfvt:mqaxyDC2JmSoPvikO8t

    Score
    7/10

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Loads dropped DLL

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks