Overview

overview

7

Static

static

7

84d50f6b9a...18.exe

windows7-x64

7

84d50f6b9a...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84d50f6b9a0565d510ac222245801c3f_JaffaCakes118

  • Size

    673KB

  • Sample

    240810-fagx1swekn

  • MD5

    84d50f6b9a0565d510ac222245801c3f

  • SHA1

    85a0e6fe5be0463d344fc1e5b4bf3e4f0da8faec

  • SHA256

    12656d01bc8eac47e46c3a2a4cba73d6c05c5e08bcb7b59c608cfb938b19231a

  • SHA512

    5cd2f393c6d49afaf7057c677d4debd2ff75efb18b34faa42f91552aac3db4175f0ddb981ffe73d4603124f4a92ea975335b0497b2391f66d84e3801f56e8441

  • SSDEEP

    12288:kc8pqa01tbBOJanSXPgxIpHohT/Z+xQ9pb0GDTXOTlPUSoSvTxUILLSHZIq:kBQBOJhPgUIhLZKQf0GnX4PHoSvR6HZP

Score
7/10
discoveryevasionthemida

Malware Config

Targets

    • Target

      84d50f6b9a0565d510ac222245801c3f_JaffaCakes118

    • Size

      673KB

    • MD5

      84d50f6b9a0565d510ac222245801c3f

    • SHA1

      85a0e6fe5be0463d344fc1e5b4bf3e4f0da8faec

    • SHA256

      12656d01bc8eac47e46c3a2a4cba73d6c05c5e08bcb7b59c608cfb938b19231a

    • SHA512

      5cd2f393c6d49afaf7057c677d4debd2ff75efb18b34faa42f91552aac3db4175f0ddb981ffe73d4603124f4a92ea975335b0497b2391f66d84e3801f56e8441

    • SSDEEP

      12288:kc8pqa01tbBOJanSXPgxIpHohT/Z+xQ9pb0GDTXOTlPUSoSvTxUILLSHZIq:kBQBOJhPgUIhLZKQf0GnX4PHoSvR6HZP

    Score
    7/10
    discoveryevasionthemida

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks