Overview

overview

9

Static

static

3

2dbcb6b1bf...18.exe

windows7-x64

1

2dbcb6b1bf...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2dbcb6b1bf7ecfa8e71f3e7a0e735bdb_JaffaCakes118

  • Size

    675KB

  • Sample

    240510-gyk51sag59

  • MD5

    2dbcb6b1bf7ecfa8e71f3e7a0e735bdb

  • SHA1

    e6cb8a177b30ed9e5be889e3502522ed29576cb8

  • SHA256

    23a807b601251945a4d217034c1a4e58a0a8282b205048e4bd56d23cd4cee24c

  • SHA512

    76b983f2d0e2cc6328cd78fc06460bc4dc0fb08836cfcbcd1a0dc6b32787020d0fb95673117e43ca5024983a3a4bc2495a1589f970829f175e0134749ed4e198

  • SSDEEP

    12288:ijTPlGaJY8jGOIf0B4wGPWlnTXSIYWkGiIM6P4IuViSZp+o+GI3TTulejKV3fX:QTPlGoyf0B4Z+dTixJIMV/+9TTu4uV3v

Score
9/10
evasion

Malware Config

Targets

    • Target

      2dbcb6b1bf7ecfa8e71f3e7a0e735bdb_JaffaCakes118

    • Size

      675KB

    • MD5

      2dbcb6b1bf7ecfa8e71f3e7a0e735bdb

    • SHA1

      e6cb8a177b30ed9e5be889e3502522ed29576cb8

    • SHA256

      23a807b601251945a4d217034c1a4e58a0a8282b205048e4bd56d23cd4cee24c

    • SHA512

      76b983f2d0e2cc6328cd78fc06460bc4dc0fb08836cfcbcd1a0dc6b32787020d0fb95673117e43ca5024983a3a4bc2495a1589f970829f175e0134749ed4e198

    • SSDEEP

      12288:ijTPlGaJY8jGOIf0B4wGPWlnTXSIYWkGiIM6P4IuViSZp+o+GI3TTulejKV3fX:QTPlGoyf0B4Z+dTixJIMV/+9TTu4uV3v

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks