Overview

overview

9

Static

static

3

f7e9213c9e...18.exe

windows7-x64

1

f7e9213c9e...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7e9213c9e590152b18849f634751397_JaffaCakes118

  • Size

    675KB

  • Sample

    240418-nrtxxach9y

  • MD5

    f7e9213c9e590152b18849f634751397

  • SHA1

    571f88532f8289cc479e0419a9c2d25ae4c476f1

  • SHA256

    11f2e22c4a596d036e42df832876bae017b8c1823710e2519572b1f0169608a0

  • SHA512

    4e932a43c72dbad92b2b0f6989f4d8f535b58f60e05124e850fe36b4ff3f1051ec038430d3bc6bbc0626195ce02983c6c036a9f9b956f3fe4a13024164c10f2a

  • SSDEEP

    12288:ig23fTsc17tI634LIwHVUfBCzmh7/7LgqF7B6qFEP34bmCNF8Eh6gY:L23fwutALFHVCCzuHgqF7B614nvh6gY

Score
9/10
evasion

Malware Config

Targets

    • Target

      f7e9213c9e590152b18849f634751397_JaffaCakes118

    • Size

      675KB

    • MD5

      f7e9213c9e590152b18849f634751397

    • SHA1

      571f88532f8289cc479e0419a9c2d25ae4c476f1

    • SHA256

      11f2e22c4a596d036e42df832876bae017b8c1823710e2519572b1f0169608a0

    • SHA512

      4e932a43c72dbad92b2b0f6989f4d8f535b58f60e05124e850fe36b4ff3f1051ec038430d3bc6bbc0626195ce02983c6c036a9f9b956f3fe4a13024164c10f2a

    • SSDEEP

      12288:ig23fTsc17tI634LIwHVUfBCzmh7/7LgqF7B6qFEP34bmCNF8Eh6gY:L23fwutALFHVCCzuHgqF7B614nvh6gY

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks