Overview

overview

9

Static

static

3

e99a91ebb6...18.exe

windows7-x64

1

e99a91ebb6...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e99a91ebb62d3ccebe7cbcde8343aec8_JaffaCakes118

  • Size

    622KB

  • Sample

    240409-kn5y8aec4z

  • MD5

    e99a91ebb62d3ccebe7cbcde8343aec8

  • SHA1

    b74dbb1b28cb97a56edc224b21231a090b05b969

  • SHA256

    1258c6ae31201e995fedec3b9846df1cf5725e33e7a36ba27d70e620b4b3cae5

  • SHA512

    39e05a35eb4c827aaed0d3e04c5835edb11b446becfe29f8d86a18ec0820f7c7d68bd56890e96f71331ffd09e48f16eaf5fa626ee169f1afb0004d7174c4ab99

  • SSDEEP

    12288:xe+3r4YpcQvAKgzIr+5C6B2WWHclE1Sw6UMWHDGuNy/tjNz6q:U+3r4wgK+5C6sWWHclE17fDJuz6q

Score
9/10
evasion

Malware Config

Targets

    • Target

      e99a91ebb62d3ccebe7cbcde8343aec8_JaffaCakes118

    • Size

      622KB

    • MD5

      e99a91ebb62d3ccebe7cbcde8343aec8

    • SHA1

      b74dbb1b28cb97a56edc224b21231a090b05b969

    • SHA256

      1258c6ae31201e995fedec3b9846df1cf5725e33e7a36ba27d70e620b4b3cae5

    • SHA512

      39e05a35eb4c827aaed0d3e04c5835edb11b446becfe29f8d86a18ec0820f7c7d68bd56890e96f71331ffd09e48f16eaf5fa626ee169f1afb0004d7174c4ab99

    • SSDEEP

      12288:xe+3r4YpcQvAKgzIr+5C6B2WWHclE1Sw6UMWHDGuNy/tjNz6q:U+3r4wgK+5C6sWWHclE17fDJuz6q

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks