Overview

overview

7

Static

static

7

608230e66a...18.dll

windows7-x64

7

608230e66a...18.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    608230e66a83f41de8c2e4979fae12ba_JaffaCakes118

  • Size

    622KB

  • Sample

    240721-n7fp8asaqn

  • MD5

    608230e66a83f41de8c2e4979fae12ba

  • SHA1

    ad01bfd8a55a725c6782b494eee115126fde858a

  • SHA256

    934f3267f0cfc4968eb6433ec1b16aea16042f1a20514378cefe640a8007d327

  • SHA512

    a51eba2fa9027df048d126d6254886a6f6c3043209035a411b8a66bd38a7eb1b145d8dc4527f52fd2aeef6b52662e927a59fc82cf39498c95a8ebb2fa4dd3b3a

  • SSDEEP

    12288:c6ataOeDRI7+auIg6mJIwVoWDgX8PPf0xeqHsE5x8l:c6fOeDRMbIoWDgX8/0xJsm8

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      608230e66a83f41de8c2e4979fae12ba_JaffaCakes118

    • Size

      622KB

    • MD5

      608230e66a83f41de8c2e4979fae12ba

    • SHA1

      ad01bfd8a55a725c6782b494eee115126fde858a

    • SHA256

      934f3267f0cfc4968eb6433ec1b16aea16042f1a20514378cefe640a8007d327

    • SHA512

      a51eba2fa9027df048d126d6254886a6f6c3043209035a411b8a66bd38a7eb1b145d8dc4527f52fd2aeef6b52662e927a59fc82cf39498c95a8ebb2fa4dd3b3a

    • SSDEEP

      12288:c6ataOeDRI7+auIg6mJIwVoWDgX8PPf0xeqHsE5x8l:c6fOeDRMbIoWDgX8/0xJsm8

    Score
    7/10
    evasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks