Overview

overview

9

Static

static

3

232b7888c5...18.exe

windows7-x64

9

232b7888c5...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    232b7888c5e5135104523e2b9c248709_JaffaCakes118

  • Size

    524KB

  • Sample

    240508-eyqpdsad3v

  • MD5

    232b7888c5e5135104523e2b9c248709

  • SHA1

    ab75e8e37f5081fe3fdde18a49053890cbcded62

  • SHA256

    d58b3617681858b9aee346a629bdc4619169b8438ef14150937d940c2e04c6ba

  • SHA512

    bafa8be071280e6462c58f2482c0f51116f371baadc5ba2ade228f498bdfaa107834aef4ec5cd3fdeb5fda17b7939c122f8e7b890e1ed08a295664c3e599e4ee

  • SSDEEP

    12288:AJuKBAjsT2ws4GrRu2QRqxqlOy8AF05yHk67zR960LF:AJuXsTuRRu2wqNGIyHr96i

Score
9/10
evasion

Malware Config

Targets

    • Target

      232b7888c5e5135104523e2b9c248709_JaffaCakes118

    • Size

      524KB

    • MD5

      232b7888c5e5135104523e2b9c248709

    • SHA1

      ab75e8e37f5081fe3fdde18a49053890cbcded62

    • SHA256

      d58b3617681858b9aee346a629bdc4619169b8438ef14150937d940c2e04c6ba

    • SHA512

      bafa8be071280e6462c58f2482c0f51116f371baadc5ba2ade228f498bdfaa107834aef4ec5cd3fdeb5fda17b7939c122f8e7b890e1ed08a295664c3e599e4ee

    • SSDEEP

      12288:AJuKBAjsT2ws4GrRu2QRqxqlOy8AF05yHk67zR960LF:AJuXsTuRRu2wqNGIyHr96i

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks