Overview

overview

7

Static

static

7

8a0893b337...18.exe

windows7-x64

7

8a0893b337...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    8a0893b337f658fb97397ea0332c3dce_JaffaCakes118

  • Size

    1.8MB

  • Sample

    240811-ml65lswbjm

  • MD5

    8a0893b337f658fb97397ea0332c3dce

  • SHA1

    c1118c5ebbb700f2e25f79d7e2bb83508ee47d6f

  • SHA256

    501c0b8234bc312bda711eb38a94883a5be16b643168173e7b48c93f729cd445

  • SHA512

    0e1683e106143b2b1238194eed7327497a506c7619430fead6365092da13824911c914affcb5e0dcae4400433015de5765472a52bbb4c84540a3042c361ca0e6

  • SSDEEP

    49152:T+Hgx4jtp3KmSAsy8FEr+N572hpOFxsGZDmYhU:T+AShc3AR8Gw72afDthU

Score
7/10
discoveryevasionthemida

Malware Config

Targets

    • Target

      8a0893b337f658fb97397ea0332c3dce_JaffaCakes118

    • Size

      1.8MB

    • MD5

      8a0893b337f658fb97397ea0332c3dce

    • SHA1

      c1118c5ebbb700f2e25f79d7e2bb83508ee47d6f

    • SHA256

      501c0b8234bc312bda711eb38a94883a5be16b643168173e7b48c93f729cd445

    • SHA512

      0e1683e106143b2b1238194eed7327497a506c7619430fead6365092da13824911c914affcb5e0dcae4400433015de5765472a52bbb4c84540a3042c361ca0e6

    • SSDEEP

      49152:T+Hgx4jtp3KmSAsy8FEr+N572hpOFxsGZDmYhU:T+AShc3AR8Gw72afDthU

    Score
    7/10
    evasionthemidadiscovery

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks