Overview

overview

7

Static

static

7

3d1e5f8f8e...18.exe

windows7-x64

7

3d1e5f8f8e...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3d1e5f8f8e546f71ecd2f24bbe38ab75_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240712-m7nv6a1amr

  • MD5

    3d1e5f8f8e546f71ecd2f24bbe38ab75

  • SHA1

    64eaff99dd7febe0584936108fdf06f0f204af91

  • SHA256

    3c351b7ea0f6a4669be3b1081802ae71f046c17fa6dd629746a79252308fd6fb

  • SHA512

    3f67a6eff8cab954c74d23f753cb0510660fb04db3d5a7bd5c4520eb62ad2d83dd21545d781ea133d3a2dc918de7d3d954f3bf7dd67a027593c5991342da8755

  • SSDEEP

    24576:5Yod+qt54GjtWk9b8ApnC+aKlt7vrzicrMo7TJooflT5Y:5YAU8C+FlfbfhR5Y

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      3d1e5f8f8e546f71ecd2f24bbe38ab75_JaffaCakes118

    • Size

      1.2MB

    • MD5

      3d1e5f8f8e546f71ecd2f24bbe38ab75

    • SHA1

      64eaff99dd7febe0584936108fdf06f0f204af91

    • SHA256

      3c351b7ea0f6a4669be3b1081802ae71f046c17fa6dd629746a79252308fd6fb

    • SHA512

      3f67a6eff8cab954c74d23f753cb0510660fb04db3d5a7bd5c4520eb62ad2d83dd21545d781ea133d3a2dc918de7d3d954f3bf7dd67a027593c5991342da8755

    • SSDEEP

      24576:5Yod+qt54GjtWk9b8ApnC+aKlt7vrzicrMo7TJooflT5Y:5YAU8C+FlfbfhR5Y

    Score
    7/10
    evasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks