Overview

overview

9

Static

static

3

070dc119f4...18.exe

windows7-x64

1

070dc119f4...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    070dc119f450c19058e9538ac0ef4af6_JaffaCakes118

  • Size

    628KB

  • Sample

    240429-hktexach37

  • MD5

    070dc119f450c19058e9538ac0ef4af6

  • SHA1

    2d814f7923b435f4d40ab5c736bf6b9abeb170a9

  • SHA256

    14c576bd75ba75b0d82ad827340d677862aec0c1caac1da35cb139bbdb7d6f23

  • SHA512

    764df1b25f58cae9c80f9ea557777e1e1bf69b4982fbbff81f4766d9ab378d100d9822317c160f988796018141dfaca5b370579bd58160fde769d8e0d6a7bea3

  • SSDEEP

    12288:eL4MO+THTJZVyWW9Xl6nHZDQQXiPYURmjDAOu7Q944dc62:o4MO+Vx+M1OPoO7tGc62

Score
9/10
evasion

Malware Config

Targets

    • Target

      070dc119f450c19058e9538ac0ef4af6_JaffaCakes118

    • Size

      628KB

    • MD5

      070dc119f450c19058e9538ac0ef4af6

    • SHA1

      2d814f7923b435f4d40ab5c736bf6b9abeb170a9

    • SHA256

      14c576bd75ba75b0d82ad827340d677862aec0c1caac1da35cb139bbdb7d6f23

    • SHA512

      764df1b25f58cae9c80f9ea557777e1e1bf69b4982fbbff81f4766d9ab378d100d9822317c160f988796018141dfaca5b370579bd58160fde769d8e0d6a7bea3

    • SSDEEP

      12288:eL4MO+THTJZVyWW9Xl6nHZDQQXiPYURmjDAOu7Q944dc62:o4MO+Vx+M1OPoO7tGc62

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks