Overview

overview

7

Static

static

7

431afccadf...18.exe

windows7-x64

7

431afccadf...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    431afccadf5104debcced7a0f7439930_JaffaCakes118

  • Size

    3.6MB

  • Sample

    240713-ykhleaxbqe

  • MD5

    431afccadf5104debcced7a0f7439930

  • SHA1

    9034dc11a79ef914a59a6077f3bb05f691c042b8

  • SHA256

    09a2bf438bb5b290d6e0e5285dbebc24be3556c27f22749406d7f40141b4ae8b

  • SHA512

    40bdecb06eb2a8bf0b10d58b6b6e87f840a72dbaccbcef9a92570ab5fde81aa92635183fd0eebf4693b151d4a2270ede019d4eb3e6d68d7366c50b19c5e492f1

  • SSDEEP

    98304:2k10VUu7hl0HMCvnFB/FRWd9qjhFEanv50:h0j0xnfE9+h+anB0

Score
7/10
evasionpersistencethemida

Malware Config

Targets

    • Target

      431afccadf5104debcced7a0f7439930_JaffaCakes118

    • Size

      3.6MB

    • MD5

      431afccadf5104debcced7a0f7439930

    • SHA1

      9034dc11a79ef914a59a6077f3bb05f691c042b8

    • SHA256

      09a2bf438bb5b290d6e0e5285dbebc24be3556c27f22749406d7f40141b4ae8b

    • SHA512

      40bdecb06eb2a8bf0b10d58b6b6e87f840a72dbaccbcef9a92570ab5fde81aa92635183fd0eebf4693b151d4a2270ede019d4eb3e6d68d7366c50b19c5e492f1

    • SSDEEP

      98304:2k10VUu7hl0HMCvnFB/FRWd9qjhFEanv50:h0j0xnfE9+h+anB0

    Score
    7/10
    evasionpersistencethemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks