Overview

overview

7

Static

static

7

82f0adf62f...18.exe

windows7-x64

7

82f0adf62f...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    82f0adf62f71f8ce89ccfc0fda21dfa9_JaffaCakes118

  • Size

    640KB

  • Sample

    240802-eh157azala

  • MD5

    82f0adf62f71f8ce89ccfc0fda21dfa9

  • SHA1

    f40d05a75e5ad16b24b046f4173e0f215300467f

  • SHA256

    1b5fac6c3f439a8e16a286b1269c1842d31b406d22ff55079224f2ffcce1c84e

  • SHA512

    ed211a0dee98edd481f693db8a5a93e264b95627bd45d2cfaba35056d9162bc0dd841916a702a446a929177477258ceb9184fca51ebcba82c864c578f0bdc1e4

  • SSDEEP

    12288:3Ht8JLKezOwBigxb8PKwH6rL5y//pkh4kEGjIB6M42QGxHar30GME6RRVzOoaiA:3t6/zbigpgKfv5yXY4kDwbxHJGmRVzOP

Score
7/10
discoveryevasionthemida

Malware Config

Targets

    • Target

      82f0adf62f71f8ce89ccfc0fda21dfa9_JaffaCakes118

    • Size

      640KB

    • MD5

      82f0adf62f71f8ce89ccfc0fda21dfa9

    • SHA1

      f40d05a75e5ad16b24b046f4173e0f215300467f

    • SHA256

      1b5fac6c3f439a8e16a286b1269c1842d31b406d22ff55079224f2ffcce1c84e

    • SHA512

      ed211a0dee98edd481f693db8a5a93e264b95627bd45d2cfaba35056d9162bc0dd841916a702a446a929177477258ceb9184fca51ebcba82c864c578f0bdc1e4

    • SSDEEP

      12288:3Ht8JLKezOwBigxb8PKwH6rL5y//pkh4kEGjIB6M42QGxHar30GME6RRVzOoaiA:3t6/zbigpgKfv5yXY4kDwbxHJGmRVzOP

    Score
    7/10
    evasionthemidadiscovery

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks