General

  • Target

    3f1f0fb502c233860269aaddc3a8fa6f_JaffaCakes118

  • Size

    524KB

  • Sample

    240513-mxws1sba8v

  • MD5

    3f1f0fb502c233860269aaddc3a8fa6f

  • SHA1

    6c4283234ee175050cb06a6a0a05e806ea24f629

  • SHA256

    76e58b224d4eefde468c9a262291887b96e200d09dba30803af6393a2b84e73a

  • SHA512

    6a5d6858defb0085079282539cd7339ec1e7d06f14186e7019dddad05d36acaf510ce1234d2d99168fe99e6a5fb9d17b5a5fcbf0d8dc7ed614ffd3ef57757d92

  • SSDEEP

    12288:AJuKBAjsT2ws4GrRu2QRqxqlOy8AF05yHk67zR960LF:AJuXsTuRRu2wqNGIyHr96i

Score
9/10

Malware Config

Targets

    • Target

      3f1f0fb502c233860269aaddc3a8fa6f_JaffaCakes118

    • Size

      524KB

    • MD5

      3f1f0fb502c233860269aaddc3a8fa6f

    • SHA1

      6c4283234ee175050cb06a6a0a05e806ea24f629

    • SHA256

      76e58b224d4eefde468c9a262291887b96e200d09dba30803af6393a2b84e73a

    • SHA512

      6a5d6858defb0085079282539cd7339ec1e7d06f14186e7019dddad05d36acaf510ce1234d2d99168fe99e6a5fb9d17b5a5fcbf0d8dc7ed614ffd3ef57757d92

    • SSDEEP

      12288:AJuKBAjsT2ws4GrRu2QRqxqlOy8AF05yHk67zR960LF:AJuXsTuRRu2wqNGIyHr96i

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks