Overview

overview

9

Static

static

3

e87658a2bc...18.exe

windows7-x64

1

e87658a2bc...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e87658a2bcef40010ba41205fc65dbf2_JaffaCakes118

  • Size

    664KB

  • Sample

    240408-1dpr9acd85

  • MD5

    e87658a2bcef40010ba41205fc65dbf2

  • SHA1

    a647f66e5ab5bcb10214f3a1b962683a11912377

  • SHA256

    1427ec46eafce1c2b383ca01d00397aef7d3ca773d663a2b5d864e2fb19589ef

  • SHA512

    47c470deb7bea9aa2bbce6776c38d8d757759f3c696fcb6d49c8d8a7f27c8ebff336907ea04c6fd66b349f86e83106773b75dc21e08f6d9c4471d3ccd00e1b72

  • SSDEEP

    12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16U:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1v

Score
9/10
evasion

Malware Config

Targets

    • Target

      e87658a2bcef40010ba41205fc65dbf2_JaffaCakes118

    • Size

      664KB

    • MD5

      e87658a2bcef40010ba41205fc65dbf2

    • SHA1

      a647f66e5ab5bcb10214f3a1b962683a11912377

    • SHA256

      1427ec46eafce1c2b383ca01d00397aef7d3ca773d663a2b5d864e2fb19589ef

    • SHA512

      47c470deb7bea9aa2bbce6776c38d8d757759f3c696fcb6d49c8d8a7f27c8ebff336907ea04c6fd66b349f86e83106773b75dc21e08f6d9c4471d3ccd00e1b72

    • SSDEEP

      12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16U:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1v

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks