Overview

overview

7

Static

static

7

080c3f6a32...18.exe

windows7-x64

7

080c3f6a32...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    080c3f6a32bd1f1019c065a4284bac1a_JaffaCakes118

  • Size

    2.3MB

  • Sample

    240624-mtbzfayakf

  • MD5

    080c3f6a32bd1f1019c065a4284bac1a

  • SHA1

    cf45961ff179c43498c2f30254ace0a0a9ee25bb

  • SHA256

    77afd288d7aee453ebb1911fadcf7d825a68587b5df39fc8b1ba0bcca14b7269

  • SHA512

    317695ba0d0fa55381a47a9f2cdb63b3e61c8f81d41d6f71ca725266f231d2b867f6837be8d9a13d3b5761a868b61081f8b7a705d53fdf8aeb128165a746ee45

  • SSDEEP

    49152:JbpItw1AbObNDFigHRxVKUlcWF/eEtRN4IPIwxyzSkW7LmkKiFuapKiFy:/gw1K4Nh5RxVKUZ2CyIAwxyzSkCLmkKt

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      080c3f6a32bd1f1019c065a4284bac1a_JaffaCakes118

    • Size

      2.3MB

    • MD5

      080c3f6a32bd1f1019c065a4284bac1a

    • SHA1

      cf45961ff179c43498c2f30254ace0a0a9ee25bb

    • SHA256

      77afd288d7aee453ebb1911fadcf7d825a68587b5df39fc8b1ba0bcca14b7269

    • SHA512

      317695ba0d0fa55381a47a9f2cdb63b3e61c8f81d41d6f71ca725266f231d2b867f6837be8d9a13d3b5761a868b61081f8b7a705d53fdf8aeb128165a746ee45

    • SSDEEP

      49152:JbpItw1AbObNDFigHRxVKUlcWF/eEtRN4IPIwxyzSkW7LmkKiFuapKiFy:/gw1K4Nh5RxVKUZ2CyIAwxyzSkCLmkKt

    Score
    7/10
    evasionthemida

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks