Overview

overview

9

Static

static

3

e97afa8008...18.exe

windows7-x64

1

e97afa8008...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e97afa80082453d32def301f524ec709_JaffaCakes118

  • Size

    671KB

  • Sample

    240409-jfayfahf85

  • MD5

    e97afa80082453d32def301f524ec709

  • SHA1

    b7df4e02cbc75de1e6082abc5a59af03231c3885

  • SHA256

    10530ed6eba1af535c817c505ddf78be4358f8c81a1033cd9ed83056b057fb71

  • SHA512

    9e4ca0f4d843940dedf50ac3326ddb43aebb0a55c27901d244703ef4beddefbd2ca03b5974a32580ccb8dc1bf0f826fa6f8d164fd8554e918f5eaa1979c3c573

  • SSDEEP

    12288:SZJ7G1zskWtP44444ItPZkTKpPwHb/dgusOlMLSTQNirbCfrL6M:qJ7Uzj4yUo7Fdle8WIbCL6M

Score
9/10
evasion

Malware Config

Targets

    • Target

      e97afa80082453d32def301f524ec709_JaffaCakes118

    • Size

      671KB

    • MD5

      e97afa80082453d32def301f524ec709

    • SHA1

      b7df4e02cbc75de1e6082abc5a59af03231c3885

    • SHA256

      10530ed6eba1af535c817c505ddf78be4358f8c81a1033cd9ed83056b057fb71

    • SHA512

      9e4ca0f4d843940dedf50ac3326ddb43aebb0a55c27901d244703ef4beddefbd2ca03b5974a32580ccb8dc1bf0f826fa6f8d164fd8554e918f5eaa1979c3c573

    • SSDEEP

      12288:SZJ7G1zskWtP44444ItPZkTKpPwHb/dgusOlMLSTQNirbCfrL6M:qJ7Uzj4yUo7Fdle8WIbCL6M

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks