Overview

overview

7

Static

static

7

25f8da3079...18.exe

windows7-x64

7

25f8da3079...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    25f8da3079f8568ad6f07d3dfce5f5b7_JaffaCakes118

  • Size

    672KB

  • Sample

    240704-x33tmavbrl

  • MD5

    25f8da3079f8568ad6f07d3dfce5f5b7

  • SHA1

    9edc5f03aaddd0fbd4ae1548c3604738420ae607

  • SHA256

    7d581d58b0879c5b08471ac22b9125627d4e9c29b28a32b96bd40e7cf647cd46

  • SHA512

    82f9a5fff1486a75622b7cf72d67655bb7b7dadb19202b4f7cf6f95542a7d9688720a981b934f66b9c1474a1614a3a87b0aa3c10b2b99cc12d31f0d6794a4ce3

  • SSDEEP

    12288:bXN0m0LrZuB9r1cpCledSZkTRPWJbcIliG6kVT+O3zu3QQ:+Zm9r1colqSZfAkiwDa

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      25f8da3079f8568ad6f07d3dfce5f5b7_JaffaCakes118

    • Size

      672KB

    • MD5

      25f8da3079f8568ad6f07d3dfce5f5b7

    • SHA1

      9edc5f03aaddd0fbd4ae1548c3604738420ae607

    • SHA256

      7d581d58b0879c5b08471ac22b9125627d4e9c29b28a32b96bd40e7cf647cd46

    • SHA512

      82f9a5fff1486a75622b7cf72d67655bb7b7dadb19202b4f7cf6f95542a7d9688720a981b934f66b9c1474a1614a3a87b0aa3c10b2b99cc12d31f0d6794a4ce3

    • SSDEEP

      12288:bXN0m0LrZuB9r1cpCledSZkTRPWJbcIliG6kVT+O3zu3QQ:+Zm9r1colqSZfAkiwDa

    Score
    7/10
    evasionthemida

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks