Overview

overview

7

Static

static

7

5f340a88fc...18.exe

windows7-x64

7

5f340a88fc...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5f340a88fc49811014c099a13791d702_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240720-f776gaybmm

  • MD5

    5f340a88fc49811014c099a13791d702

  • SHA1

    822af79250c4511ab7c71ab52ab9116a2fb15d6f

  • SHA256

    9a190cbbee52a7b810b54854aa8e1e5caa08cb3eea4737eeafc8d1b407e381d7

  • SHA512

    2183ed20972c95eb867f2b47f35104a59d5b16238b646113eb57808b51070e0bb7387b48d8472b617f37861014bfd3faeb1ab25bd0aa18ea3721eeb4e059948d

  • SSDEEP

    24576:QlgrilGEvTCov10OxiRGdFL4Lf59rkmcx/p478KQg0c45JcD:fOGELv10ciRGkd94mgVg0Z2

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      5f340a88fc49811014c099a13791d702_JaffaCakes118

    • Size

      1.2MB

    • MD5

      5f340a88fc49811014c099a13791d702

    • SHA1

      822af79250c4511ab7c71ab52ab9116a2fb15d6f

    • SHA256

      9a190cbbee52a7b810b54854aa8e1e5caa08cb3eea4737eeafc8d1b407e381d7

    • SHA512

      2183ed20972c95eb867f2b47f35104a59d5b16238b646113eb57808b51070e0bb7387b48d8472b617f37861014bfd3faeb1ab25bd0aa18ea3721eeb4e059948d

    • SSDEEP

      24576:QlgrilGEvTCov10OxiRGdFL4Lf59rkmcx/p478KQg0c45JcD:fOGELv10ciRGkd94mgVg0Z2

    Score
    7/10
    evasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks