Overview

overview

9

Static

static

3

fa1bbc9411...18.exe

windows7-x64

1

fa1bbc9411...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa1bbc9411180e4110c7c6caf31ee5c7_JaffaCakes118

  • Size

    683KB

  • Sample

    240419-mkwx9agf77

  • MD5

    fa1bbc9411180e4110c7c6caf31ee5c7

  • SHA1

    aad04fdbb36952b96dba3c03278513ea06ddac30

  • SHA256

    04ea641a46495b1d1053ced12f8aab2e2d6c583a8fb57de114b07f2c9bf40d94

  • SHA512

    d08b92ef6e5b96d5a2446487fd3c4681638d6826c791dc39e713dcaa2a43806b529234b47d9da9d0e6076082dee1c71ac99da625d9b4af4ee496ca41e537e273

  • SSDEEP

    12288:apI1ozCEXgFQZ5O4GsLUfia4eiTxMovq6WuPCOlf5+V6w:yI1oz7gFGL/Uqbe6x5Ku6Op5+V6w

Score
9/10
evasion

Malware Config

Targets

    • Target

      fa1bbc9411180e4110c7c6caf31ee5c7_JaffaCakes118

    • Size

      683KB

    • MD5

      fa1bbc9411180e4110c7c6caf31ee5c7

    • SHA1

      aad04fdbb36952b96dba3c03278513ea06ddac30

    • SHA256

      04ea641a46495b1d1053ced12f8aab2e2d6c583a8fb57de114b07f2c9bf40d94

    • SHA512

      d08b92ef6e5b96d5a2446487fd3c4681638d6826c791dc39e713dcaa2a43806b529234b47d9da9d0e6076082dee1c71ac99da625d9b4af4ee496ca41e537e273

    • SSDEEP

      12288:apI1ozCEXgFQZ5O4GsLUfia4eiTxMovq6WuPCOlf5+V6w:yI1oz7gFGL/Uqbe6x5Ku6Op5+V6w

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks