Overview

overview

9

Static

static

3

f88831a820...18.exe

windows7-x64

1

f88831a820...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    f88831a820355de0dc1d55bd1ffbac61_JaffaCakes118

  • Size

    674KB

  • Sample

    240418-w9d86sbf44

  • MD5

    f88831a820355de0dc1d55bd1ffbac61

  • SHA1

    fdd3b8f64d7e5570d1db2d81a3a4da5b9d084bbf

  • SHA256

    22eb44920bb91417386c2443b050050d85e4fcfc638b7b7388cdff61217ed53b

  • SHA512

    10df1488832870c58683d7b1327294b3e992ad858d033d6f9bcb47ad5831114bc12923c4130c96378c4e9934161fc346c48f1ac8f4d6895d2558fc58a936ade7

  • SSDEEP

    12288:a52MoBmXde5YgGV9tIQLJhQ+AZeKO48H6foHcDr8YFUs/Rfq3C:S2Mo8jd9LdhQ+AZ9rgQeSRb/Fq3C

Score
9/10
evasion

Malware Config

Targets

    • Target

      f88831a820355de0dc1d55bd1ffbac61_JaffaCakes118

    • Size

      674KB

    • MD5

      f88831a820355de0dc1d55bd1ffbac61

    • SHA1

      fdd3b8f64d7e5570d1db2d81a3a4da5b9d084bbf

    • SHA256

      22eb44920bb91417386c2443b050050d85e4fcfc638b7b7388cdff61217ed53b

    • SHA512

      10df1488832870c58683d7b1327294b3e992ad858d033d6f9bcb47ad5831114bc12923c4130c96378c4e9934161fc346c48f1ac8f4d6895d2558fc58a936ade7

    • SSDEEP

      12288:a52MoBmXde5YgGV9tIQLJhQ+AZeKO48H6foHcDr8YFUs/Rfq3C:S2Mo8jd9LdhQ+AZ9rgQeSRb/Fq3C

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks