0770d5fd81434be0c7b70b8f4147acb2f758b3306efa86a27c72f44162b861e5 | Triage

Submit
Reports

Overview

overview

7

Static

static

7

fa429529bb...18.exe

windows7-x64

7

fa429529bb...18.exe

windows10-2004-x64

3

Sharing

General

Target

fa429529bb2b18795fd713ace5e4ad1b_JaffaCakes118
Size

3.5MB
Sample

240927-mr3dlsycpq
MD5

fa429529bb2b18795fd713ace5e4ad1b
SHA1

84592c14784bf5f8a6a7ce8af29155719458d744
SHA256

0770d5fd81434be0c7b70b8f4147acb2f758b3306efa86a27c72f44162b861e5
SHA512

050f4ea38b0d6e977be2b12d57b9ffddee448f482c05703a87fb2c8d060e9d96da503ce2cb6de381fbb25bd1832b432ea9920897a75dd9a1ce05a5129133e888
SSDEEP

49152:Le8BQveA4SxC1yFmNJXNgh0kyDyXiucQ/DuX5V4dDycNuNkRuBpSskj:TBQGAN01RXNgh0hM2HgxSwl

Score

7^/10

discovery persistence themida

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

fa429529bb2b18795fd713ace5e4ad1b_JaffaCakes118.exe

Resource

win7-20240903-en

discovery persistence themida

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

fa429529bb2b18795fd713ace5e4ad1b_JaffaCakes118.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Targets

- Target
  
  fa429529bb2b18795fd713ace5e4ad1b_JaffaCakes118
- Size
  
  3.5MB
- MD5
  
  fa429529bb2b18795fd713ace5e4ad1b
- SHA1
  
  84592c14784bf5f8a6a7ce8af29155719458d744
- SHA256
  
  0770d5fd81434be0c7b70b8f4147acb2f758b3306efa86a27c72f44162b861e5
- SHA512
  
  050f4ea38b0d6e977be2b12d57b9ffddee448f482c05703a87fb2c8d060e9d96da503ce2cb6de381fbb25bd1832b432ea9920897a75dd9a1ce05a5129133e888
- SSDEEP
  
  49152:Le8BQveA4SxC1yFmNJXNgh0kyDyXiucQ/DuX5V4dDycNuNkRuBpSskj:TBQGAN01RXNgh0hM2HgxSwl
Score

7^/10

discovery persistence themida
- Themida packer
  Detects Themida, an advanced Windows software protection system.
  themida
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencethemida

behavioral2

© 2018-2025

Terms | Privacy