General

  • Target

    90894ba199f267180441cf346724dd9f_JaffaCakes118

  • Size

    3.3MB

  • Sample

    241123-zfsq9avpfv

  • MD5

    90894ba199f267180441cf346724dd9f

  • SHA1

    e93d0de39c2dc787457a97573f859319bb630aa9

  • SHA256

    b02b4c50db90f2a4531a57b41ddda2ca8381d56f59f135322a57ba4aaa548b83

  • SHA512

    fc5dc8b66fff9394c639366ff36884a95f2b9e5a6065817dff64c600b998cee226c02393a1c7f0a8ca814a27ba6114e1fbca96948ec46452f58ba35c245114f7

  • SSDEEP

    49152:hyiTcnfEY94d+21EWMLJpH6uBmBKyGq2llf5i:sTnfEDd+UEWqj6usKRllY

Malware Config

Targets

    • Target

      90894ba199f267180441cf346724dd9f_JaffaCakes118

    • Size

      3.3MB

    • MD5

      90894ba199f267180441cf346724dd9f

    • SHA1

      e93d0de39c2dc787457a97573f859319bb630aa9

    • SHA256

      b02b4c50db90f2a4531a57b41ddda2ca8381d56f59f135322a57ba4aaa548b83

    • SHA512

      fc5dc8b66fff9394c639366ff36884a95f2b9e5a6065817dff64c600b998cee226c02393a1c7f0a8ca814a27ba6114e1fbca96948ec46452f58ba35c245114f7

    • SSDEEP

      49152:hyiTcnfEY94d+21EWMLJpH6uBmBKyGq2llf5i:sTnfEDd+UEWqj6usKRllY

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

MITRE ATT&CK Enterprise v15

Tasks