Overview

overview

9

Static

static

3

0a2bdefc5e...18.exe

windows7-x64

1

0a2bdefc5e...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a2bdefc5e758803968fe543b66c12c3_JaffaCakes118

  • Size

    627KB

  • Sample

    240430-vnkndsbc5v

  • MD5

    0a2bdefc5e758803968fe543b66c12c3

  • SHA1

    ac63b96c08d9224698df365f0580e8d970cda805

  • SHA256

    166860ed67354af80eca165729fc5259d90e9bb0277feffb71f97316327c2596

  • SHA512

    79669fe645f90e5e7e6ad1f920a87919e54cc689508cfc53b6aa7048382ecc12d168e90df1565c02c86a7a00873b587818e7fb8fd8e1ddbb1a0aa2d74d6e0c51

  • SSDEEP

    12288:vIfDX4Qe9z6sdTCXzRQSmPIDBrSfDriAra8xm6E:gfDX4osspmwDFgD3xm6E

Score
9/10
evasion

Malware Config

Targets

    • Target

      0a2bdefc5e758803968fe543b66c12c3_JaffaCakes118

    • Size

      627KB

    • MD5

      0a2bdefc5e758803968fe543b66c12c3

    • SHA1

      ac63b96c08d9224698df365f0580e8d970cda805

    • SHA256

      166860ed67354af80eca165729fc5259d90e9bb0277feffb71f97316327c2596

    • SHA512

      79669fe645f90e5e7e6ad1f920a87919e54cc689508cfc53b6aa7048382ecc12d168e90df1565c02c86a7a00873b587818e7fb8fd8e1ddbb1a0aa2d74d6e0c51

    • SSDEEP

      12288:vIfDX4Qe9z6sdTCXzRQSmPIDBrSfDriAra8xm6E:gfDX4osspmwDFgD3xm6E

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks