Overview

overview

7

Static

static

7

237775ff5f...18.exe

windows7-x64

7

237775ff5f...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    237775ff5f3569ed91be5955e5eb2323_JaffaCakes118

  • Size

    922KB

  • Sample

    240703-x1y3natfpq

  • MD5

    237775ff5f3569ed91be5955e5eb2323

  • SHA1

    98c49c4ab5b518dcd0e9a3c0e1ffdb3074e92be0

  • SHA256

    d3aa1265154ff1fd3d8439761c6ee1a58bfec4733b9e5a7c6c3b728f8cfbcee2

  • SHA512

    607a5cf4217ceb82470b63e77a443d8405db6249b2485e5592ed4e35e98b7782b80963c622f58db4ca573360d60d5866ffda9ed22f7c6fb5b67974aa17c61003

  • SSDEEP

    24576:no+tr7T7G9SKrF4iVdzagMH14gOEWep+fG:xtror2cdmgMZOw

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      237775ff5f3569ed91be5955e5eb2323_JaffaCakes118

    • Size

      922KB

    • MD5

      237775ff5f3569ed91be5955e5eb2323

    • SHA1

      98c49c4ab5b518dcd0e9a3c0e1ffdb3074e92be0

    • SHA256

      d3aa1265154ff1fd3d8439761c6ee1a58bfec4733b9e5a7c6c3b728f8cfbcee2

    • SHA512

      607a5cf4217ceb82470b63e77a443d8405db6249b2485e5592ed4e35e98b7782b80963c622f58db4ca573360d60d5866ffda9ed22f7c6fb5b67974aa17c61003

    • SSDEEP

      24576:no+tr7T7G9SKrF4iVdzagMH14gOEWep+fG:xtror2cdmgMZOw

    Score
    7/10
    evasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks