Overview

overview

7

Static

static

7

d0e2857585...18.exe

windows7-x64

7

d0e2857585...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d0e2857585fb0593c05f3a7414886dc2_JaffaCakes118

  • Size

    2.3MB

  • Sample

    240907-cw75jszhnm

  • MD5

    d0e2857585fb0593c05f3a7414886dc2

  • SHA1

    d9acb5db1b80f5f4545c700c9bb10bb409af02de

  • SHA256

    cb8ec46d630371294ea6cd5490151d4883a14daa8f4ff2d3eda135791a944d6a

  • SHA512

    e78a360a9c985f57742f9be081eb57d63a81d97c9966fde88666a294c9b02f910f455e31b1112ef4a6e7e1a033fcd32a5b42777155dce5ce8f275c581f11fa7b

  • SSDEEP

    49152:0SAQn0kWuqRlh8PnbX1cURX6iFd1bFI8EUjyWl:3AQnQuqzKPD1t6iv1bZEUjyo

Score
7/10
discoveryevasionthemida

Malware Config

Targets

    • Target

      d0e2857585fb0593c05f3a7414886dc2_JaffaCakes118

    • Size

      2.3MB

    • MD5

      d0e2857585fb0593c05f3a7414886dc2

    • SHA1

      d9acb5db1b80f5f4545c700c9bb10bb409af02de

    • SHA256

      cb8ec46d630371294ea6cd5490151d4883a14daa8f4ff2d3eda135791a944d6a

    • SHA512

      e78a360a9c985f57742f9be081eb57d63a81d97c9966fde88666a294c9b02f910f455e31b1112ef4a6e7e1a033fcd32a5b42777155dce5ce8f275c581f11fa7b

    • SSDEEP

      49152:0SAQn0kWuqRlh8PnbX1cURX6iFd1bFI8EUjyWl:3AQnQuqzKPD1t6iv1bZEUjyo

    Score
    7/10
    discoveryevasionthemida

    • Executes dropped EXE

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks