Overview

overview

10

Static

static

10

dcd0239302...18.exe

windows7-x64

9

dcd0239302...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dcd02393021f3c18687ef1372f56913e_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240912-w57pxsxhnd

  • MD5

    dcd02393021f3c18687ef1372f56913e

  • SHA1

    5d6b18ea5426e8045a46cf981bd5366f2793d845

  • SHA256

    f8f2de05df4ce800ecf9e2e39d109f6d6682269c4f278994282d9c34e418ec11

  • SHA512

    b3db6f022e078976e5ae02d6a689d6f47d6488af6d7145765393c85ed213a1a4732626c91ada4b4f5a648e283f64ba6f88fa15347601de45b1dc9e2fe68ab9d4

  • SSDEEP

    24576:XVjP7YnR9jgvrBQIxwxi+pGUekFbEG4qomzA92T3TUTmnS2Vp6RwTyJvHyt:XN2jgYrpGU5A/2TDUTIp6STydSt

Score
10/10
modiloaderdiscoveryevasion

Malware Config

Targets

    • Target

      dcd02393021f3c18687ef1372f56913e_JaffaCakes118

    • Size

      1.2MB

    • MD5

      dcd02393021f3c18687ef1372f56913e

    • SHA1

      5d6b18ea5426e8045a46cf981bd5366f2793d845

    • SHA256

      f8f2de05df4ce800ecf9e2e39d109f6d6682269c4f278994282d9c34e418ec11

    • SHA512

      b3db6f022e078976e5ae02d6a689d6f47d6488af6d7145765393c85ed213a1a4732626c91ada4b4f5a648e283f64ba6f88fa15347601de45b1dc9e2fe68ab9d4

    • SSDEEP

      24576:XVjP7YnR9jgvrBQIxwxi+pGUekFbEG4qomzA92T3TUTmnS2Vp6RwTyJvHyt:XN2jgYrpGU5A/2TDUTIp6STydSt

    Score
    9/10
    discoveryevasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks