Overview

overview

7

Static

static

7

f62f9ad8e3...18.exe

windows7-x64

7

f62f9ad8e3...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    f62f9ad8e32614be96b0e667c27b3391_JaffaCakes118

  • Size

    738KB

  • Sample

    240925-rhxtzszbpn

  • MD5

    f62f9ad8e32614be96b0e667c27b3391

  • SHA1

    b0e0f9243c3ab0aa26cfd36bf226f88c642a70b7

  • SHA256

    fc0108c1fc2508557f5c04e16497fcfb79dcb6d2bc9b53c8c69c6ad3a6d6d2ed

  • SHA512

    22d0d270d4802c6c9c227683e41428904d564c52362cd58499cb0a8c8ed5a25a51721fa31d148c53722ae0fd798977860c6dc20a2be8a597a8bed85c81d03759

  • SSDEEP

    12288:5rXyeHHX+s9tDeNdQ/8Y89HUWf+vVxw0QK0dYCfANRhj970Sa34y2U/nz9BqF7z:5rNHHuCeA8Y89HUWWv3wV3d7Yt9vceM8

Score
7/10
discoveryevasionthemida

Malware Config

Targets

    • Target

      f62f9ad8e32614be96b0e667c27b3391_JaffaCakes118

    • Size

      738KB

    • MD5

      f62f9ad8e32614be96b0e667c27b3391

    • SHA1

      b0e0f9243c3ab0aa26cfd36bf226f88c642a70b7

    • SHA256

      fc0108c1fc2508557f5c04e16497fcfb79dcb6d2bc9b53c8c69c6ad3a6d6d2ed

    • SHA512

      22d0d270d4802c6c9c227683e41428904d564c52362cd58499cb0a8c8ed5a25a51721fa31d148c53722ae0fd798977860c6dc20a2be8a597a8bed85c81d03759

    • SSDEEP

      12288:5rXyeHHX+s9tDeNdQ/8Y89HUWf+vVxw0QK0dYCfANRhj970Sa34y2U/nz9BqF7z:5rNHHuCeA8Y89HUWWv3wV3d7Yt9vceM8

    Score
    7/10
    discoveryevasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks