Overview

overview

9

Static

static

3

22938cfa02...18.exe

windows7-x64

1

22938cfa02...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22938cfa021ec9e0007b1bd6f3416e0e_JaffaCakes118

  • Size

    666KB

  • Sample

    240508-bqp64sah2v

  • MD5

    22938cfa021ec9e0007b1bd6f3416e0e

  • SHA1

    95380c8ee44c3308dd377f404ce058c412c63ee4

  • SHA256

    115012493e17fbbd4156e967e5aa6344625f3762d33fea73143741ae612964be

  • SHA512

    cbd20e038726a5abeec19cfe79909d26a7f5a4a71b5528fa240adf64607a3aea3c0de487d2c1ac722c402150d2266428fd0ec3ab9196d11032758aa09b935952

  • SSDEEP

    12288:qMy9Kdzy3fiNTXjMAHmtaW0rfoZ9kfC8uQ9UZT+6X2:/y9KB/Rzby0rgYtuz+6X2

Score
9/10
evasion

Malware Config

Targets

    • Target

      22938cfa021ec9e0007b1bd6f3416e0e_JaffaCakes118

    • Size

      666KB

    • MD5

      22938cfa021ec9e0007b1bd6f3416e0e

    • SHA1

      95380c8ee44c3308dd377f404ce058c412c63ee4

    • SHA256

      115012493e17fbbd4156e967e5aa6344625f3762d33fea73143741ae612964be

    • SHA512

      cbd20e038726a5abeec19cfe79909d26a7f5a4a71b5528fa240adf64607a3aea3c0de487d2c1ac722c402150d2266428fd0ec3ab9196d11032758aa09b935952

    • SSDEEP

      12288:qMy9Kdzy3fiNTXjMAHmtaW0rfoZ9kfC8uQ9UZT+6X2:/y9KB/Rzby0rgYtuz+6X2

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks