Overview

overview

9

Static

static

3

5f33f6ca7f...18.exe

windows7-x64

1

5f33f6ca7f...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    5f33f6ca7f11612bef949051bb6fa9e5_JaffaCakes118

  • Size

    673KB

  • Sample

    240520-p7j83sbe85

  • MD5

    5f33f6ca7f11612bef949051bb6fa9e5

  • SHA1

    09518d79c76b80aed6225b047ae2c25ad4d046c6

  • SHA256

    04aa6a4f0fa69a48a83305674873a714bf244e916582dba7cf9ad8c3ae23cc42

  • SHA512

    f4c21c89ca0b21fd25e070ea6322a75c40473c7b6b917de254afc40932ab99aec19273ac35521e3ef61491759baec18195c0f144f5739351ff1c389a16d7da4d

  • SSDEEP

    12288:q5v8XvqRrYvhPi7cTqoRKHgGYcveMTv7AqeLDDuu9YMVFca6e:Cv8XCH7uqHgGY4e0QDD9YMV2a6e

Score
9/10
evasion

Malware Config

Targets

    • Target

      5f33f6ca7f11612bef949051bb6fa9e5_JaffaCakes118

    • Size

      673KB

    • MD5

      5f33f6ca7f11612bef949051bb6fa9e5

    • SHA1

      09518d79c76b80aed6225b047ae2c25ad4d046c6

    • SHA256

      04aa6a4f0fa69a48a83305674873a714bf244e916582dba7cf9ad8c3ae23cc42

    • SHA512

      f4c21c89ca0b21fd25e070ea6322a75c40473c7b6b917de254afc40932ab99aec19273ac35521e3ef61491759baec18195c0f144f5739351ff1c389a16d7da4d

    • SSDEEP

      12288:q5v8XvqRrYvhPi7cTqoRKHgGYcveMTv7AqeLDDuu9YMVFca6e:Cv8XCH7uqHgGY4e0QDD9YMV2a6e

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks