General

  • Target

    e908147c66b0ab1d844f170afb2c2707_JaffaCakes118

  • Size

    3.3MB

  • Sample

    240409-c8bxwacb35

  • MD5

    e908147c66b0ab1d844f170afb2c2707

  • SHA1

    9878a9e3078e9df5c64b2f6f6eb06ee400d672eb

  • SHA256

    fedef5363bb5a0f8336e9fd006408ffd2f0827698e9d7fe1f4ba6171579e1bf9

  • SHA512

    477e3c3156a18898a3baa4b4b9aaad177a2d7858acfdc1d1fe0871278e4dbedf5b0fa2f125eb6d7cc0b79239d49307f8d971f1964c3682826d007573a738851e

  • SSDEEP

    98304:X63Ei+4MuGPQ9uJEEoGHQiLeBQiQCUr1NzUv30gn5NlN/gv:QEEMuGGGoGwiLgQxkl5N

Malware Config

Targets

    • Target

      e908147c66b0ab1d844f170afb2c2707_JaffaCakes118

    • Size

      3.3MB

    • MD5

      e908147c66b0ab1d844f170afb2c2707

    • SHA1

      9878a9e3078e9df5c64b2f6f6eb06ee400d672eb

    • SHA256

      fedef5363bb5a0f8336e9fd006408ffd2f0827698e9d7fe1f4ba6171579e1bf9

    • SHA512

      477e3c3156a18898a3baa4b4b9aaad177a2d7858acfdc1d1fe0871278e4dbedf5b0fa2f125eb6d7cc0b79239d49307f8d971f1964c3682826d007573a738851e

    • SSDEEP

      98304:X63Ei+4MuGPQ9uJEEoGHQiLeBQiQCUr1NzUv30gn5NlN/gv:QEEMuGGGoGwiLgQxkl5N

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks