Overview

overview

7

Static

static

7

4183be9640...18.exe

windows7-x64

7

4183be9640...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4183be964027895500dcd44342efb88c_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240713-nr99wsygrj

  • MD5

    4183be964027895500dcd44342efb88c

  • SHA1

    60444efcbb94db59298586ceba8a94db8cfd5375

  • SHA256

    d8e23ffe1195d09190f39030a46d9093a9e2cf3e05ce28f91198f04f98182148

  • SHA512

    687bf0bdcf805f9d2764dcf794c0dd78ccd2ce56abff09cb375e6e9a2eb5a4813469153babb2fc7f40ab3a71a80b486cd8b450605ed5d9bb2ecead0dadda7378

  • SSDEEP

    24576:9ECug1PAWDEowzOQxP8l01UBhb+15AQzQNOEOOuc3+lXxGLM+4wtbZID9PWg:9FuYPAPvzOQlSfoE9uIIBSlhZIDF7

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      4183be964027895500dcd44342efb88c_JaffaCakes118

    • Size

      1.3MB

    • MD5

      4183be964027895500dcd44342efb88c

    • SHA1

      60444efcbb94db59298586ceba8a94db8cfd5375

    • SHA256

      d8e23ffe1195d09190f39030a46d9093a9e2cf3e05ce28f91198f04f98182148

    • SHA512

      687bf0bdcf805f9d2764dcf794c0dd78ccd2ce56abff09cb375e6e9a2eb5a4813469153babb2fc7f40ab3a71a80b486cd8b450605ed5d9bb2ecead0dadda7378

    • SSDEEP

      24576:9ECug1PAWDEowzOQxP8l01UBhb+15AQzQNOEOOuc3+lXxGLM+4wtbZID9PWg:9FuYPAPvzOQlSfoE9uIIBSlhZIDF7

    Score
    7/10
    evasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks