Overview

overview

7

Static

static

7

d37e61ba7c...18.exe

windows7-x64

7

d37e61ba7c...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d37e61ba7ca43d89aaf894da2c8f0502_JaffaCakes118

  • Size

    826KB

  • Sample

    240908-embfbsxblc

  • MD5

    d37e61ba7ca43d89aaf894da2c8f0502

  • SHA1

    334445f0cb31eff76c9d067819c00a26d86f9722

  • SHA256

    21ede5a38f67cff220489a40e1d05ab84d350b7c5c369edfb3af38febae22cc9

  • SHA512

    b315df07f192d26b0eca8b05d975ce9936c00d3cb1c2ae8c8935e8fb64f2cdcc8db1f363d4960c16e9d17b322a878472f4f0ec8ded2154b345d00d48f70fb67b

  • SSDEEP

    12288:WgG8c5iN5lhdIOad0+fND5ET8s5EjefEC3xw7wwCub9lbDcJ1V3GmUd+x3:Z/N5lTaPfND5y81jefECW7wwp8o/gx

Score
7/10
discoveryevasionthemida

Malware Config

Targets

    • Target

      d37e61ba7ca43d89aaf894da2c8f0502_JaffaCakes118

    • Size

      826KB

    • MD5

      d37e61ba7ca43d89aaf894da2c8f0502

    • SHA1

      334445f0cb31eff76c9d067819c00a26d86f9722

    • SHA256

      21ede5a38f67cff220489a40e1d05ab84d350b7c5c369edfb3af38febae22cc9

    • SHA512

      b315df07f192d26b0eca8b05d975ce9936c00d3cb1c2ae8c8935e8fb64f2cdcc8db1f363d4960c16e9d17b322a878472f4f0ec8ded2154b345d00d48f70fb67b

    • SSDEEP

      12288:WgG8c5iN5lhdIOad0+fND5ET8s5EjefEC3xw7wwCub9lbDcJ1V3GmUd+x3:Z/N5lTaPfND5y81jefECW7wwp8o/gx

    Score
    7/10
    discoveryevasionthemida

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks