Overview

overview

7

Static

static

3

64056a3977...18.exe

windows7-x64

7

64056a3977...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    64056a397715b9a4fa34b5711bfeb941_JaffaCakes118

  • Size

    833KB

  • Sample

    240722-vjteqsybnm

  • MD5

    64056a397715b9a4fa34b5711bfeb941

  • SHA1

    4148a78222cf2792109564bf5672761a3076f4f7

  • SHA256

    048e8847c28e773df54815a669f5d3194424c78d47b4d3329513795ade1c906b

  • SHA512

    7f940396ead7b9dfd0d55ea85aca3f234e02ecac48873a9a6f0179a8fd79443dcda51d743a6f5f05142a7cae58e88fa6a9611b51afae6a382b203e9505a65d8d

  • SSDEEP

    12288:EgyUCaXKWGaFjzyCnamhHWbDQ5xvSYemebO2iu2gH5IgI:KUCoKWGq3y+amhHWbDQ5ANUu7Hw

Score
7/10
evasion

Malware Config

Targets

    • Target

      64056a397715b9a4fa34b5711bfeb941_JaffaCakes118

    • Size

      833KB

    • MD5

      64056a397715b9a4fa34b5711bfeb941

    • SHA1

      4148a78222cf2792109564bf5672761a3076f4f7

    • SHA256

      048e8847c28e773df54815a669f5d3194424c78d47b4d3329513795ade1c906b

    • SHA512

      7f940396ead7b9dfd0d55ea85aca3f234e02ecac48873a9a6f0179a8fd79443dcda51d743a6f5f05142a7cae58e88fa6a9611b51afae6a382b203e9505a65d8d

    • SSDEEP

      12288:EgyUCaXKWGaFjzyCnamhHWbDQ5xvSYemebO2iu2gH5IgI:KUCoKWGq3y+amhHWbDQ5ANUu7Hw

    Score
    7/10
    evasion

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks