Overview

overview

9

Static

static

3

4aeaf9d521...18.exe

windows7-x64

1

4aeaf9d521...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    4aeaf9d5213a3f1cfb2a2843f648983b_JaffaCakes118

  • Size

    673KB

  • Sample

    240516-nypa1aba4s

  • MD5

    4aeaf9d5213a3f1cfb2a2843f648983b

  • SHA1

    c75c49f6986cf8dd95afcc742a83868a0331b84a

  • SHA256

    1112a8eaad0c4ee8c2e35c874e69e3e75c19e460df237da5cefcd03a52f638a3

  • SHA512

    ef4d878219afd14d0e1b10f9739537743ed58a63f714dfc4a7c6afa4e45a16c0109970a61d456641bf57144bc30c9e8ca1b2182259b4e3db6d32337ddaac2971

  • SSDEEP

    12288:q5v8XvqRrYvhPi7cTqoRKHgGYcveMTv7AqeLDDuu9YMVFca64:Cv8XCH7uqHgGY4e0QDD9YMV2a64

Score
9/10
evasion

Malware Config

Targets

    • Target

      4aeaf9d5213a3f1cfb2a2843f648983b_JaffaCakes118

    • Size

      673KB

    • MD5

      4aeaf9d5213a3f1cfb2a2843f648983b

    • SHA1

      c75c49f6986cf8dd95afcc742a83868a0331b84a

    • SHA256

      1112a8eaad0c4ee8c2e35c874e69e3e75c19e460df237da5cefcd03a52f638a3

    • SHA512

      ef4d878219afd14d0e1b10f9739537743ed58a63f714dfc4a7c6afa4e45a16c0109970a61d456641bf57144bc30c9e8ca1b2182259b4e3db6d32337ddaac2971

    • SSDEEP

      12288:q5v8XvqRrYvhPi7cTqoRKHgGYcveMTv7AqeLDDuu9YMVFca64:Cv8XCH7uqHgGY4e0QDD9YMV2a64

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks