Overview

overview

8

Static

static

7

73f4b0a319...18.exe

windows7-x64

8

73f4b0a319...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    73f4b0a31998da5fa75e4fc2a6f15be0_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240726-n5p6wazdmf

  • MD5

    73f4b0a31998da5fa75e4fc2a6f15be0

  • SHA1

    482f02507cc3f20357e29ee41e57d48b22594b50

  • SHA256

    112e881bf4f34da6615d23446bd2435edc9170a521c443baa070e29e341b74a3

  • SHA512

    019972fdb3103309ae862d963b4526226dd37b3291e353e03e2f1fffe96a776d7a462f48751b9c2051dd1f830443d702194b7d6d2a8b93ab8ebc484c02d110b8

  • SSDEEP

    24576:nZnqvi49RUM26n+FkYR5L/pqKi40e8K5OEYT8fEeHxIbGJ8T4abQ7p:Zn6Z26n+Tpq9K5yI1HxEbQ7p

Score
8/10
discoveryevasionpersistencethemida

Malware Config

Targets

    • Target

      73f4b0a31998da5fa75e4fc2a6f15be0_JaffaCakes118

    • Size

      1.2MB

    • MD5

      73f4b0a31998da5fa75e4fc2a6f15be0

    • SHA1

      482f02507cc3f20357e29ee41e57d48b22594b50

    • SHA256

      112e881bf4f34da6615d23446bd2435edc9170a521c443baa070e29e341b74a3

    • SHA512

      019972fdb3103309ae862d963b4526226dd37b3291e353e03e2f1fffe96a776d7a462f48751b9c2051dd1f830443d702194b7d6d2a8b93ab8ebc484c02d110b8

    • SSDEEP

      24576:nZnqvi49RUM26n+FkYR5L/pqKi40e8K5OEYT8fEeHxIbGJ8T4abQ7p:Zn6Z26n+Tpq9K5yI1HxEbQ7p

    Score
    8/10
    discoveryevasionpersistencethemida

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Loads dropped DLL

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks