Overview

overview

7

Static

static

7

20ea694695...18.exe

windows7-x64

7

20ea694695...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20ea694695293e1e392aa35de7143c81_JaffaCakes118

  • Size

    996KB

  • Sample

    240703-dw88aayhjj

  • MD5

    20ea694695293e1e392aa35de7143c81

  • SHA1

    39bf99f6c295384b4db421e3009c219e7b6afd16

  • SHA256

    d8d91c6303a2e871f71f21726a300dedfc6030a2f0a62910c7e750595ead746d

  • SHA512

    5f7d0e0cba89beaef82e5855537c71fbf56a09e0b1745c286dfe163a7d39e8d9a99928f11185db3aaafea25dff44dc020ff396ef94e717a284eb098cb83a1169

  • SSDEEP

    24576:E4EI15kGroh7CXKllt0Mh+ZNE/sMJ2R0Ssyq/ZjBhfY:II1GDh+01Wq//hfY

Score
7/10
evasionpersistencethemida

Malware Config

Targets

    • Target

      20ea694695293e1e392aa35de7143c81_JaffaCakes118

    • Size

      996KB

    • MD5

      20ea694695293e1e392aa35de7143c81

    • SHA1

      39bf99f6c295384b4db421e3009c219e7b6afd16

    • SHA256

      d8d91c6303a2e871f71f21726a300dedfc6030a2f0a62910c7e750595ead746d

    • SHA512

      5f7d0e0cba89beaef82e5855537c71fbf56a09e0b1745c286dfe163a7d39e8d9a99928f11185db3aaafea25dff44dc020ff396ef94e717a284eb098cb83a1169

    • SSDEEP

      24576:E4EI15kGroh7CXKllt0Mh+ZNE/sMJ2R0Ssyq/ZjBhfY:II1GDh+01Wq//hfY

    Score
    7/10
    evasionpersistencethemida

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks