Overview

overview

9

Static

static

3

48e7d57783...18.exe

windows7-x64

1

48e7d57783...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    48e7d577835e74d9a9dcaa1f00c83ee9_JaffaCakes118

  • Size

    671KB

  • Sample

    240516-bm5sdsdh45

  • MD5

    48e7d577835e74d9a9dcaa1f00c83ee9

  • SHA1

    bd9b50d0d823c203c5b76f65d497d4953ec1a9e4

  • SHA256

    113bac8a5bf161d7dc764c4814cdc7bace4766732c9fcde464a682d35d86c70c

  • SHA512

    b2bd0ca36355005d70ce224e71da53e3e848088d6042572ce49735ec53f996419a8016438f622e89bac5527fc38e4805a70eea98dd72158fb5b8d47da4729c4c

  • SSDEEP

    12288:SZJ7G1zskWtP44444ItPZkTKpPwHb/dgusOlMLSTQNirbCfrL63:qJ7Uzj4yUo7Fdle8WIbCL63

Score
9/10
evasion

Malware Config

Targets

    • Target

      48e7d577835e74d9a9dcaa1f00c83ee9_JaffaCakes118

    • Size

      671KB

    • MD5

      48e7d577835e74d9a9dcaa1f00c83ee9

    • SHA1

      bd9b50d0d823c203c5b76f65d497d4953ec1a9e4

    • SHA256

      113bac8a5bf161d7dc764c4814cdc7bace4766732c9fcde464a682d35d86c70c

    • SHA512

      b2bd0ca36355005d70ce224e71da53e3e848088d6042572ce49735ec53f996419a8016438f622e89bac5527fc38e4805a70eea98dd72158fb5b8d47da4729c4c

    • SSDEEP

      12288:SZJ7G1zskWtP44444ItPZkTKpPwHb/dgusOlMLSTQNirbCfrL63:qJ7Uzj4yUo7Fdle8WIbCL63

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks