Overview

overview

9

Static

static

3

4228a915de...18.exe

windows7-x64

1

4228a915de...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4228a915dedeb3ee177f5f46233eb1ff_JaffaCakes118

  • Size

    581KB

  • Sample

    240514-txqqbsef55

  • MD5

    4228a915dedeb3ee177f5f46233eb1ff

  • SHA1

    56ce52fe45da0654e901ab852ed757fd03213592

  • SHA256

    137a5750f7620abea513d46655f59d728c8e4d7a14345b8abefcfb5a803883f5

  • SHA512

    698217c4e2fe9f7f57b342ab162d0d984701f8a072a206b8900826c5359ac082ef98474b77a0d35fb328b2177bcedba24a13b41be0c05961e833af647cc6901a

  • SSDEEP

    12288:PGssz1GO0w5SUkbggD3+F5Qfr2OP7xGI1xySCnu5yJYTFSzxh6R:essz11kbBD3wefr2OP7xGSX3To9h6R

Score
9/10
evasion

Malware Config

Targets

    • Target

      4228a915dedeb3ee177f5f46233eb1ff_JaffaCakes118

    • Size

      581KB

    • MD5

      4228a915dedeb3ee177f5f46233eb1ff

    • SHA1

      56ce52fe45da0654e901ab852ed757fd03213592

    • SHA256

      137a5750f7620abea513d46655f59d728c8e4d7a14345b8abefcfb5a803883f5

    • SHA512

      698217c4e2fe9f7f57b342ab162d0d984701f8a072a206b8900826c5359ac082ef98474b77a0d35fb328b2177bcedba24a13b41be0c05961e833af647cc6901a

    • SSDEEP

      12288:PGssz1GO0w5SUkbggD3+F5Qfr2OP7xGI1xySCnu5yJYTFSzxh6R:essz11kbBD3wefr2OP7xGSX3To9h6R

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks