Overview

overview

7

Static

static

7

5a04db86b3...18.dll

windows7-x64

7

5a04db86b3...18.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5a04db86b3307bb0d70f599a39e91c76_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240719-cep8eaxerm

  • MD5

    5a04db86b3307bb0d70f599a39e91c76

  • SHA1

    b925e158db79610e4aa64dafba478f29c68c3445

  • SHA256

    5462a095cf832e43e7ad109778d578a0f6a0b5abae4bed5abade78fef2a5eae9

  • SHA512

    e4318cb717103ca36f0bdb8cb9d9dc40e2b5b9b3a09868b19cc36d3772912b6882d3d667e8f467bc50d16955fc0d928978f8cbe3857ac30d704877ac5c3e0a3a

  • SSDEEP

    24576:n7RxE/ZwnRK0hQtcSgoy2lGHNhG0DC6ysdhSzf69bf:n7TIwnQ0hQtcouNU026X

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      5a04db86b3307bb0d70f599a39e91c76_JaffaCakes118

    • Size

      1.1MB

    • MD5

      5a04db86b3307bb0d70f599a39e91c76

    • SHA1

      b925e158db79610e4aa64dafba478f29c68c3445

    • SHA256

      5462a095cf832e43e7ad109778d578a0f6a0b5abae4bed5abade78fef2a5eae9

    • SHA512

      e4318cb717103ca36f0bdb8cb9d9dc40e2b5b9b3a09868b19cc36d3772912b6882d3d667e8f467bc50d16955fc0d928978f8cbe3857ac30d704877ac5c3e0a3a

    • SSDEEP

      24576:n7RxE/ZwnRK0hQtcSgoy2lGHNhG0DC6ysdhSzf69bf:n7TIwnQ0hQtcouNU026X

    Score
    7/10
    evasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks