Overview

overview

9

Static

static

3

df292fe169...18.dll

windows7-x64

9

df292fe169...18.dll

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    df292fe1697597e75c0e847af57041b1_JaffaCakes118

  • Size

    752KB

  • Sample

    240914-aq6y7axgrb

  • MD5

    df292fe1697597e75c0e847af57041b1

  • SHA1

    431d6c10e4da94dab6d9be3d982338bfcdd5256b

  • SHA256

    873e68f864e018883b0df0c84a2e75b2f387b16636fbd51c28ead4be93daa45c

  • SHA512

    e219bbea64370945beb58b26cd954a927df5b1793d0d469da401bf4ccc15a6178f612f0fe1398a3fda0df2d2b1f3cd2242603426d29e33b7211cbaaa85494fec

  • SSDEEP

    12288:5vFwYP1GOWBGEjMaIYNh6F2+ZMFfT/CbAbZk9D783BRMnzGXeOVwHuFh:dFwYP19EXZNQ1MFfT/CbAlHxi+Kk

Score
9/10
discoveryevasion

Malware Config

Targets

    • Target

      df292fe1697597e75c0e847af57041b1_JaffaCakes118

    • Size

      752KB

    • MD5

      df292fe1697597e75c0e847af57041b1

    • SHA1

      431d6c10e4da94dab6d9be3d982338bfcdd5256b

    • SHA256

      873e68f864e018883b0df0c84a2e75b2f387b16636fbd51c28ead4be93daa45c

    • SHA512

      e219bbea64370945beb58b26cd954a927df5b1793d0d469da401bf4ccc15a6178f612f0fe1398a3fda0df2d2b1f3cd2242603426d29e33b7211cbaaa85494fec

    • SSDEEP

      12288:5vFwYP1GOWBGEjMaIYNh6F2+ZMFfT/CbAbZk9D783BRMnzGXeOVwHuFh:dFwYP19EXZNQ1MFfT/CbAlHxi+Kk

    Score
    9/10
    discoveryevasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks