Overview

overview

9

Static

static

3

4e7cd0dbc2...18.exe

windows7-x64

9

4e7cd0dbc2...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    4e7cd0dbc26aed61a27e25c5074eb29f_JaffaCakes118

  • Size

    638KB

  • Sample

    240517-fg1cyaaa8w

  • MD5

    4e7cd0dbc26aed61a27e25c5074eb29f

  • SHA1

    82d49fee37839a16e975c7c81d4761935d726805

  • SHA256

    23d571ef0d0b08c65ad62e323e2662b4322aec70fd1328678a0d7bed668e56c9

  • SHA512

    8b3ab9a0493c42eacd1b67efb75d6a06adc3f86355a20a926a99777d19e9dfbc766fd5b6c5dc7c411eedb59d0550ee070c5a98973a0fa69b8bf680db9a41bf03

  • SSDEEP

    12288:hmrT/NtMTbIhcvPMLxa8bzzyUoCyhRB2Sjy7Xrxti3rwbX1W38oZ1f6jB3B2:QrT/Nt3AML1XRykdzltqm8r3f6jBI

Score
9/10
evasion

Malware Config

Targets

    • Target

      4e7cd0dbc26aed61a27e25c5074eb29f_JaffaCakes118

    • Size

      638KB

    • MD5

      4e7cd0dbc26aed61a27e25c5074eb29f

    • SHA1

      82d49fee37839a16e975c7c81d4761935d726805

    • SHA256

      23d571ef0d0b08c65ad62e323e2662b4322aec70fd1328678a0d7bed668e56c9

    • SHA512

      8b3ab9a0493c42eacd1b67efb75d6a06adc3f86355a20a926a99777d19e9dfbc766fd5b6c5dc7c411eedb59d0550ee070c5a98973a0fa69b8bf680db9a41bf03

    • SSDEEP

      12288:hmrT/NtMTbIhcvPMLxa8bzzyUoCyhRB2Sjy7Xrxti3rwbX1W38oZ1f6jB3B2:QrT/Nt3AML1XRykdzltqm8r3f6jBI

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks