Overview

overview

9

Static

static

3

905532e753...18.exe

windows7-x64

9

905532e753...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    905532e75330bc062a287309ef93226d_JaffaCakes118

  • Size

    564KB

  • Sample

    240603-dhw1ssgh5v

  • MD5

    905532e75330bc062a287309ef93226d

  • SHA1

    29f377d1667c6a72dbebee6876c04713c2eac1b7

  • SHA256

    866e6648d37bd033d8bc7c18627b44c3ddedf53396de7b1faefb04821c97fad4

  • SHA512

    42063865e698f4f930c1260a03fd2b210a0f69858b37f7c90b2c56489dd1d71d5da1092dbab2b77af1272800e320dc71154f3028c5cd4593e17163a2a14aa206

  • SSDEEP

    12288:C42hmbdSGZmDm8/jEzOcQA+NzTHzCfN53As47Bp/9S1LX8m+kG3eCuMOu36twUn:C42hmbdSGcDm8/AzOpA+NzTHWfN53AsN

Score
9/10
evasion

Malware Config

Targets

    • Target

      905532e75330bc062a287309ef93226d_JaffaCakes118

    • Size

      564KB

    • MD5

      905532e75330bc062a287309ef93226d

    • SHA1

      29f377d1667c6a72dbebee6876c04713c2eac1b7

    • SHA256

      866e6648d37bd033d8bc7c18627b44c3ddedf53396de7b1faefb04821c97fad4

    • SHA512

      42063865e698f4f930c1260a03fd2b210a0f69858b37f7c90b2c56489dd1d71d5da1092dbab2b77af1272800e320dc71154f3028c5cd4593e17163a2a14aa206

    • SSDEEP

      12288:C42hmbdSGZmDm8/jEzOcQA+NzTHzCfN53As47Bp/9S1LX8m+kG3eCuMOu36twUn:C42hmbdSGcDm8/AzOpA+NzTHWfN53AsN

    Score
    9/10
    evasion

    • Looks for VirtualBox Guest Additions in registry

      evasion

    • Looks for VMWare Tools registry key

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks