Overview

overview

7

Static

static

7

5fb5438717...18.dll

windows7-x64

7

5fb5438717...18.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5fb5438717ea0f419bfd0f4a1e8132a2_JaffaCakes118

  • Size

    726KB

  • Sample

    240720-j5ctbsxekg

  • MD5

    5fb5438717ea0f419bfd0f4a1e8132a2

  • SHA1

    5653a059f34e586360216e90b84539eaabb4d98a

  • SHA256

    a4bcdade02708a0599ad0e19315ab8d5aa53eb14f45e21bd8000a54a46daa372

  • SHA512

    79625b28887d0187a04f0563a9857f9b5fd8f5ebe8520adb6300135472893bbdf4344b106f34482275d65fdf240143e0ef2a5f03586415e722404864cdcb1d46

  • SSDEEP

    12288:oYLVUexbb1KjqmEE8JXEKQAh4iLxqZFwFLdOOdOB5N/eFlCzgffKQlenXZd2qv:DpRKjz8vQo4RQFkO6DqMzYqXZ3v

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      5fb5438717ea0f419bfd0f4a1e8132a2_JaffaCakes118

    • Size

      726KB

    • MD5

      5fb5438717ea0f419bfd0f4a1e8132a2

    • SHA1

      5653a059f34e586360216e90b84539eaabb4d98a

    • SHA256

      a4bcdade02708a0599ad0e19315ab8d5aa53eb14f45e21bd8000a54a46daa372

    • SHA512

      79625b28887d0187a04f0563a9857f9b5fd8f5ebe8520adb6300135472893bbdf4344b106f34482275d65fdf240143e0ef2a5f03586415e722404864cdcb1d46

    • SSDEEP

      12288:oYLVUexbb1KjqmEE8JXEKQAh4iLxqZFwFLdOOdOB5N/eFlCzgffKQlenXZd2qv:DpRKjz8vQo4RQFkO6DqMzYqXZ3v

    Score
    7/10
    evasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks