Overview

overview

9

Static

static

3

0e4f3d63e3...18.exe

windows7-x64

9

0e4f3d63e3...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0e4f3d63e3e6cf75ff43d0267df2657b_JaffaCakes118

  • Size

    627KB

  • Sample

    240502-m31zxsfd5v

  • MD5

    0e4f3d63e3e6cf75ff43d0267df2657b

  • SHA1

    d817c968c1d1a708518542f56d9dfc3f682d23d3

  • SHA256

    241d16a65a5babd057a8ce023206a09335bc0d2116530c84cf09f34bce49ecc3

  • SHA512

    80fbb474d24a27ff501f76a9a9b3e2fdcb87602f001cf539c7b05815277d5e365e9c7c7fd6331914e5443b2a33c52c31b7dc69b45d5b435827f0f420e5ff2ce4

  • SSDEEP

    12288:z4WDjPiYTbAcEL4fCu9BJxB37Yu21yQH0SCJKluZpSlYrX2SlmLs1SW370:EWDjPiJG9bD37J2oQUSCJKBl02SlF1SV

Score
9/10
evasion

Malware Config

Targets

    • Target

      0e4f3d63e3e6cf75ff43d0267df2657b_JaffaCakes118

    • Size

      627KB

    • MD5

      0e4f3d63e3e6cf75ff43d0267df2657b

    • SHA1

      d817c968c1d1a708518542f56d9dfc3f682d23d3

    • SHA256

      241d16a65a5babd057a8ce023206a09335bc0d2116530c84cf09f34bce49ecc3

    • SHA512

      80fbb474d24a27ff501f76a9a9b3e2fdcb87602f001cf539c7b05815277d5e365e9c7c7fd6331914e5443b2a33c52c31b7dc69b45d5b435827f0f420e5ff2ce4

    • SSDEEP

      12288:z4WDjPiYTbAcEL4fCu9BJxB37Yu21yQH0SCJKluZpSlYrX2SlmLs1SW370:EWDjPiJG9bD37J2oQUSCJKBl02SlF1SV

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks