Overview

overview

9

Static

static

3

34bfc2b7c2...18.exe

windows7-x64

1

34bfc2b7c2...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    34bfc2b7c2d5688f8ac0410cbc45da73_JaffaCakes118

  • Size

    624KB

  • Sample

    240511-qfq3zscb64

  • MD5

    34bfc2b7c2d5688f8ac0410cbc45da73

  • SHA1

    a2c09ef4aca99aaabfe7642cd5ff14491a09cbc8

  • SHA256

    047a24cacf0bd5bd49ed530e3aec2382129827f9abb4dac00d8cca1e448b57bd

  • SHA512

    329aea2dfaca244623f2a663a97291e43f6f1d10601a006fc055de5dd3e5121209a34a40c86e58b2752c1c1111b281948dbbdd05686017fc452e30543d353abf

  • SSDEEP

    12288:5UdZT1ZPtL5S05tmnqtfPp7WQfds84tsIDHPYg000wch63NM8n:mdZTX7S05tmqrShHPYxbTw3NM8n

Score
9/10
evasion

Malware Config

Targets

    • Target

      34bfc2b7c2d5688f8ac0410cbc45da73_JaffaCakes118

    • Size

      624KB

    • MD5

      34bfc2b7c2d5688f8ac0410cbc45da73

    • SHA1

      a2c09ef4aca99aaabfe7642cd5ff14491a09cbc8

    • SHA256

      047a24cacf0bd5bd49ed530e3aec2382129827f9abb4dac00d8cca1e448b57bd

    • SHA512

      329aea2dfaca244623f2a663a97291e43f6f1d10601a006fc055de5dd3e5121209a34a40c86e58b2752c1c1111b281948dbbdd05686017fc452e30543d353abf

    • SSDEEP

      12288:5UdZT1ZPtL5S05tmnqtfPp7WQfds84tsIDHPYg000wch63NM8n:mdZTX7S05tmqrShHPYxbTw3NM8n

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks