Overview

overview

7

Static

static

3

77504bd224...18.exe

windows7-x64

7

77504bd224...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    77504bd224481ff3cb203307986b0109_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240727-hyqwyatcpj

  • MD5

    77504bd224481ff3cb203307986b0109

  • SHA1

    fdea6afac69a81409103d7c12be8e2a627cf0efc

  • SHA256

    5a63e3bf2e6f524a61428996fa52ef470036d60b9fdc1a99f4780bfe5823f710

  • SHA512

    ebe120fff2d5ee7019b5c2619e42490071faf5680f44ce71073b8e7c3c3d585db1486a01057bb91fb6d3da910c72e601c1b7b33548168ea3eebf7faf68007c35

  • SSDEEP

    24576:FBVX57P/uLUVXZC/nCUFSplbu4pwZi99TkP7votzzxXaw/+jBlmtT2JK5VWP3+65:nVXRP/U8Z6bPqSP8tz9iUTKvP3+QJ

Score
7/10
discoveryevasion

Malware Config

Targets

    • Target

      77504bd224481ff3cb203307986b0109_JaffaCakes118

    • Size

      1.2MB

    • MD5

      77504bd224481ff3cb203307986b0109

    • SHA1

      fdea6afac69a81409103d7c12be8e2a627cf0efc

    • SHA256

      5a63e3bf2e6f524a61428996fa52ef470036d60b9fdc1a99f4780bfe5823f710

    • SHA512

      ebe120fff2d5ee7019b5c2619e42490071faf5680f44ce71073b8e7c3c3d585db1486a01057bb91fb6d3da910c72e601c1b7b33548168ea3eebf7faf68007c35

    • SSDEEP

      24576:FBVX57P/uLUVXZC/nCUFSplbu4pwZi99TkP7votzzxXaw/+jBlmtT2JK5VWP3+65:nVXRP/U8Z6bPqSP8tz9iUTKvP3+QJ

    Score
    7/10
    discoveryevasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks