Overview

overview

9

Static

static

3

0e9be72927...18.exe

windows7-x64

1

0e9be72927...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0e9be729277a2f3567c7f16771ff9c56_JaffaCakes118

  • Size

    675KB

  • Sample

    240502-qjjhbahf71

  • MD5

    0e9be729277a2f3567c7f16771ff9c56

  • SHA1

    1173f10e55ae40f7a04951f8b12cbd2aff079ed9

  • SHA256

    12869d668cb374ee199d17037e699bd0285293362c432459a596cca551ba104f

  • SHA512

    c3b6e4b83166f738236bfc72d8bc424b2d6939dfad0472e764cdb7db6b993a00d7422b4fe720d07c2b71a94f8625b23930f0d2c9441907fcf0209d27990b81a9

  • SSDEEP

    12288:vNxt2GCQZwqLIMRBeZHaElEZlBiZGXEtdrIsydYSYjXDwiYhT+63h:1xt2n6IQ2aEiriZUEtqr+ljXUiYF+63h

Score
9/10
evasion

Malware Config

Targets

    • Target

      0e9be729277a2f3567c7f16771ff9c56_JaffaCakes118

    • Size

      675KB

    • MD5

      0e9be729277a2f3567c7f16771ff9c56

    • SHA1

      1173f10e55ae40f7a04951f8b12cbd2aff079ed9

    • SHA256

      12869d668cb374ee199d17037e699bd0285293362c432459a596cca551ba104f

    • SHA512

      c3b6e4b83166f738236bfc72d8bc424b2d6939dfad0472e764cdb7db6b993a00d7422b4fe720d07c2b71a94f8625b23930f0d2c9441907fcf0209d27990b81a9

    • SSDEEP

      12288:vNxt2GCQZwqLIMRBeZHaElEZlBiZGXEtdrIsydYSYjXDwiYhT+63h:1xt2n6IQ2aEiriZUEtqr+ljXUiYF+63h

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks