Overview

overview

7

Static

static

3

25ad2a5398...18.exe

windows7-x64

7

25ad2a5398...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25ad2a53980285445bf8c757a771876d_JaffaCakes118

  • Size

    2.5MB

  • Sample

    240704-wdw44s1cmm

  • MD5

    25ad2a53980285445bf8c757a771876d

  • SHA1

    867f157e8104505fc8c7040889b44ee7e5d5797a

  • SHA256

    c7d6a3933f3c4bc6406e4a60bb8123f25bf336168c019a3d500d7a3651eb46e7

  • SHA512

    d10bf017054c5e841afa69c4380d9ba4b4e6cb9ad515945317de7f7f297f1978140689d5db8fd8f86b9520a5694222ac06839c95b15e6320e17f41d2c08e721f

  • SSDEEP

    49152:ac5cTie+ObsWg3yDLaNKqOtQBnw+ExWq1kcs6MYzGtSKXbYJCz8xrioTfez2:ac5JcbslC2KqOtU4j1k36MYzGM8P8xrS

Score
7/10
evasionpersistence

Malware Config

Targets

    • Target

      25ad2a53980285445bf8c757a771876d_JaffaCakes118

    • Size

      2.5MB

    • MD5

      25ad2a53980285445bf8c757a771876d

    • SHA1

      867f157e8104505fc8c7040889b44ee7e5d5797a

    • SHA256

      c7d6a3933f3c4bc6406e4a60bb8123f25bf336168c019a3d500d7a3651eb46e7

    • SHA512

      d10bf017054c5e841afa69c4380d9ba4b4e6cb9ad515945317de7f7f297f1978140689d5db8fd8f86b9520a5694222ac06839c95b15e6320e17f41d2c08e721f

    • SSDEEP

      49152:ac5cTie+ObsWg3yDLaNKqOtQBnw+ExWq1kcs6MYzGtSKXbYJCz8xrioTfez2:ac5JcbslC2KqOtU4j1k36MYzGM8P8xrS

    Score
    7/10
    evasionpersistence

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks