Overview

overview

9

Static

static

3

4594b2b50a...18.exe

windows7-x64

9

4594b2b50a...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    4594b2b50a4841075585c5f5580ba1ad_JaffaCakes118

  • Size

    954KB

  • Sample

    240714-nd9q7sxhpj

  • MD5

    4594b2b50a4841075585c5f5580ba1ad

  • SHA1

    baed4beb3c9325a149ac7a32f6731ad68c3893d2

  • SHA256

    d4e87d7ee950bf1278920f635cdcf6794697dd28e24e64466c879fe92c111608

  • SHA512

    d063c08863a9859e23f015ff37f255818fef559a1f4077cdb01310179ace7146e577ee7aa41406e6628ed1ada47e308c4482a1af35b0af2f31ce47ce1e75489b

  • SSDEEP

    24576:SomtaT66LqObi3v3UKHRUZifWKGqy2nQ3h0F2O5nili:XJ+H0C8iftGwQKFJV

Score
9/10
evasion

Malware Config

Targets

    • Target

      4594b2b50a4841075585c5f5580ba1ad_JaffaCakes118

    • Size

      954KB

    • MD5

      4594b2b50a4841075585c5f5580ba1ad

    • SHA1

      baed4beb3c9325a149ac7a32f6731ad68c3893d2

    • SHA256

      d4e87d7ee950bf1278920f635cdcf6794697dd28e24e64466c879fe92c111608

    • SHA512

      d063c08863a9859e23f015ff37f255818fef559a1f4077cdb01310179ace7146e577ee7aa41406e6628ed1ada47e308c4482a1af35b0af2f31ce47ce1e75489b

    • SSDEEP

      24576:SomtaT66LqObi3v3UKHRUZifWKGqy2nQ3h0F2O5nili:XJ+H0C8iftGwQKFJV

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks