Overview

overview

7

Static

static

3

fe66f8f6de...18.exe

windows7-x64

7

fe66f8f6de...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fe66f8f6decb47c9b4e27fb1e5d597ac_JaffaCakes118

  • Size

    374KB

  • Sample

    240929-m9r1la1hql

  • MD5

    fe66f8f6decb47c9b4e27fb1e5d597ac

  • SHA1

    19c77d39259af05ba30b96b4861ea92b2396ad57

  • SHA256

    b3ca36b8668ed14d3b8a6518f685208162126207fc29d48ce2c3e1f878aae496

  • SHA512

    0933cde6743738d49b2774fa6db779226b17c38b315716fcfaaf8c53f3fdceffb48ef2cecee4602237e0f07e876467333eec541533050b36e76e42ceecb2deca

  • SSDEEP

    6144:KE0Z/j++OOHwos2av48P5iCIxnRgv32x5z3n1bzDvmBVj+A5oGHP2Kexj:KE05aywos2qPdyRcsTnNX+H+oe

Score
7/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      fe66f8f6decb47c9b4e27fb1e5d597ac_JaffaCakes118

    • Size

      374KB

    • MD5

      fe66f8f6decb47c9b4e27fb1e5d597ac

    • SHA1

      19c77d39259af05ba30b96b4861ea92b2396ad57

    • SHA256

      b3ca36b8668ed14d3b8a6518f685208162126207fc29d48ce2c3e1f878aae496

    • SHA512

      0933cde6743738d49b2774fa6db779226b17c38b315716fcfaaf8c53f3fdceffb48ef2cecee4602237e0f07e876467333eec541533050b36e76e42ceecb2deca

    • SSDEEP

      6144:KE0Z/j++OOHwos2av48P5iCIxnRgv32x5z3n1bzDvmBVj+A5oGHP2Kexj:KE05aywos2qPdyRcsTnNX+H+oe

    Score
    7/10
    discoveryevasionpersistence

    • Executes dropped EXE

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks