Overview

overview

7

Static

static

7

246dde89aa...18.exe

windows7-x64

7

246dde89aa...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    246dde89aaab6e8f9fdc3b1b2cd8cb80_JaffaCakes118

  • Size

    1.6MB

  • Sample

    240704-dpv23stcjg

  • MD5

    246dde89aaab6e8f9fdc3b1b2cd8cb80

  • SHA1

    ced7701eb17251819745f2bf2dd900f152ab79b1

  • SHA256

    cd0974c7368b47614f9d705d25ac3b5e9153ac0d5f5f54a96a1711899a7f64b0

  • SHA512

    4f870723e793abade13a97c30028d3dfdb33efe25906c0a8b406c0d22d4ea568382bc303a58ac75a59e295569ecb0428a3cd820c1c72f991fd58dccde7b698cf

  • SSDEEP

    24576:KQDLyvw4z4ikPDx5ofVWGzpLoaHHYtLX7OxBhPx5+QdAYVJ4Vy:7RumefEG1ku4JX7m+WJ

Score
7/10
evasionspywarestealerthemida

Malware Config

Targets

    • Target

      246dde89aaab6e8f9fdc3b1b2cd8cb80_JaffaCakes118

    • Size

      1.6MB

    • MD5

      246dde89aaab6e8f9fdc3b1b2cd8cb80

    • SHA1

      ced7701eb17251819745f2bf2dd900f152ab79b1

    • SHA256

      cd0974c7368b47614f9d705d25ac3b5e9153ac0d5f5f54a96a1711899a7f64b0

    • SHA512

      4f870723e793abade13a97c30028d3dfdb33efe25906c0a8b406c0d22d4ea568382bc303a58ac75a59e295569ecb0428a3cd820c1c72f991fd58dccde7b698cf

    • SSDEEP

      24576:KQDLyvw4z4ikPDx5ofVWGzpLoaHHYtLX7OxBhPx5+QdAYVJ4Vy:7RumefEG1ku4JX7m+WJ

    Score
    7/10
    evasionspywarestealerthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks