Overview

overview

9

Static

static

3

0bce70de11...18.exe

windows7-x64

9

0bce70de11...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0bce70de110617727b69a9d0b2029702_JaffaCakes118

  • Size

    675KB

  • Sample

    240501-prswaaeh5s

  • MD5

    0bce70de110617727b69a9d0b2029702

  • SHA1

    6cd7d6161f6d7d7e07e42ac4ab5b0365c0a76d59

  • SHA256

    1186eefb7d88c187c48fd3094bbba486f8d4ca6f4a1281082699ab0d507f7d9a

  • SHA512

    401dd09be1b87e2785954f77aff490e0956ffc80aac88d426e4722ce12b71b789919da0dd6c6a2e611cff11abacc557f3cd3ec3171a970c7c50e5e53e33a6e22

  • SSDEEP

    12288:zgS/52f+ZMu6lWPt+7LF7mrCXH3H8aNk2xgNun0L6K:US/5u7urFL0XH8aNk6IL6K

Score
9/10
evasion

Malware Config

Targets

    • Target

      0bce70de110617727b69a9d0b2029702_JaffaCakes118

    • Size

      675KB

    • MD5

      0bce70de110617727b69a9d0b2029702

    • SHA1

      6cd7d6161f6d7d7e07e42ac4ab5b0365c0a76d59

    • SHA256

      1186eefb7d88c187c48fd3094bbba486f8d4ca6f4a1281082699ab0d507f7d9a

    • SHA512

      401dd09be1b87e2785954f77aff490e0956ffc80aac88d426e4722ce12b71b789919da0dd6c6a2e611cff11abacc557f3cd3ec3171a970c7c50e5e53e33a6e22

    • SSDEEP

      12288:zgS/52f+ZMu6lWPt+7LF7mrCXH3H8aNk2xgNun0L6K:US/5u7urFL0XH8aNk6IL6K

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks