Overview

overview

7

Static

static

7

4db4aedfe4...18.exe

windows7-x64

7

4db4aedfe4...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4db4aedfe437b2c085a7b9a7958bbad3_JaffaCakes118

  • Size

    525KB

  • Sample

    240716-lee7waybqg

  • MD5

    4db4aedfe437b2c085a7b9a7958bbad3

  • SHA1

    b51804554d84764a9a974e66e26a50ea92141b30

  • SHA256

    d8df0c38479e9eab4e8a82059e561362a8a58628ed405b51c2c339e135d5af5e

  • SHA512

    09bf20291969a25c99140e511b7a0e1c980b1f3f97129f67016a4423c3ca1802a81fa8ae776ca1146fff2d498703ac1d0ace3f81c543702b53a31710eb335e9c

  • SSDEEP

    12288:LmGpgotemf8RXKyjN4I+cfPY+uW7wlKesOcDKp:LmGpgotoRXKyjN4I+cfP5Ze+m

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      4db4aedfe437b2c085a7b9a7958bbad3_JaffaCakes118

    • Size

      525KB

    • MD5

      4db4aedfe437b2c085a7b9a7958bbad3

    • SHA1

      b51804554d84764a9a974e66e26a50ea92141b30

    • SHA256

      d8df0c38479e9eab4e8a82059e561362a8a58628ed405b51c2c339e135d5af5e

    • SHA512

      09bf20291969a25c99140e511b7a0e1c980b1f3f97129f67016a4423c3ca1802a81fa8ae776ca1146fff2d498703ac1d0ace3f81c543702b53a31710eb335e9c

    • SSDEEP

      12288:LmGpgotemf8RXKyjN4I+cfPY+uW7wlKesOcDKp:LmGpgotoRXKyjN4I+cfP5Ze+m

    Score
    7/10
    evasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks