Overview

overview

9

Static

static

3

f1b4688025...18.exe

windows7-x64

9

f1b4688025...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f1b4688025a9a156d5dfb809ac861f97_JaffaCakes118

  • Size

    634KB

  • Sample

    240415-w51llsfe8w

  • MD5

    f1b4688025a9a156d5dfb809ac861f97

  • SHA1

    0bf09423fa25a5f7c667acd916f44a5764b7ecc1

  • SHA256

    046962feb1e4e075eb26510990091e2e3d784886a4122fcaae775593beee26be

  • SHA512

    0df810d69924ed1288c2e60ba4d23519b9943aacd7151f2090a157607300f5910b32efd508d8cafe4060669ac4876761d7ba0528a02bbdb1e3e1766d15c74ba5

  • SSDEEP

    12288:yHzre1sDcRc0GCh5kOM9/58Mqw2O7uVKGqVZKblhspQuvtm4R3gC:izre1NZkz58M/d6gZVZKgNvbR3gC

Score
9/10
evasion

Malware Config

Targets

    • Target

      f1b4688025a9a156d5dfb809ac861f97_JaffaCakes118

    • Size

      634KB

    • MD5

      f1b4688025a9a156d5dfb809ac861f97

    • SHA1

      0bf09423fa25a5f7c667acd916f44a5764b7ecc1

    • SHA256

      046962feb1e4e075eb26510990091e2e3d784886a4122fcaae775593beee26be

    • SHA512

      0df810d69924ed1288c2e60ba4d23519b9943aacd7151f2090a157607300f5910b32efd508d8cafe4060669ac4876761d7ba0528a02bbdb1e3e1766d15c74ba5

    • SSDEEP

      12288:yHzre1sDcRc0GCh5kOM9/58Mqw2O7uVKGqVZKblhspQuvtm4R3gC:izre1NZkz58M/d6gZVZKgNvbR3gC

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks