Overview

overview

9

Static

static

3

15b691e196...18.exe

windows7-x64

1

15b691e196...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    15b691e196159dd0b9c830e4bce9c364_JaffaCakes118

  • Size

    671KB

  • Sample

    240505-dnrm9sgb28

  • MD5

    15b691e196159dd0b9c830e4bce9c364

  • SHA1

    0116ff806e235af85e2c0ee7ef93a4a1fc78ddc3

  • SHA256

    e539c5e2c33e7b1107a5bc65fdf01fefe63a0954ce80da527c3713454ee31c90

  • SHA512

    e2cfd903d1ebb2a1bd4cd1e793f2db54900b1411617b253e76b4e202efa1c38c8a049cf49b4871850b971bb94ea5e84d82446f14715c3261cf4ca7ce5d1a9a18

  • SSDEEP

    12288:SZJ7G1zskWtP44444ItPZkTKpPwHb/dgusOlMLSTQNirbCfrL69:qJ7Uzj4yUo7Fdle8WIbCL69

Score
9/10
evasion

Malware Config

Targets

    • Target

      15b691e196159dd0b9c830e4bce9c364_JaffaCakes118

    • Size

      671KB

    • MD5

      15b691e196159dd0b9c830e4bce9c364

    • SHA1

      0116ff806e235af85e2c0ee7ef93a4a1fc78ddc3

    • SHA256

      e539c5e2c33e7b1107a5bc65fdf01fefe63a0954ce80da527c3713454ee31c90

    • SHA512

      e2cfd903d1ebb2a1bd4cd1e793f2db54900b1411617b253e76b4e202efa1c38c8a049cf49b4871850b971bb94ea5e84d82446f14715c3261cf4ca7ce5d1a9a18

    • SSDEEP

      12288:SZJ7G1zskWtP44444ItPZkTKpPwHb/dgusOlMLSTQNirbCfrL69:qJ7Uzj4yUo7Fdle8WIbCL69

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks