Overview

overview

9

Static

static

3

5fa480b8fd...18.exe

windows7-x64

9

5fa480b8fd...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5fa480b8fdbd3fbd1eab570986cb7b93_JaffaCakes118

  • Size

    537KB

  • Sample

    240520-r4qykaeb86

  • MD5

    5fa480b8fdbd3fbd1eab570986cb7b93

  • SHA1

    2e2e9f55e0156297b75d2d6f431d6665b4efb249

  • SHA256

    113e748e8463b4cc18e90fb125abfc005e7d65995d8968c1d7f2cab62edceac6

  • SHA512

    2184aa52b8b80b66c3ebc68c2d5bccb1c06599dbc89b10d5549baa6026fc22514f005170065551a3cf7391fd89af6bd472a6234bbaeae82be486dfbc4fbc13a0

  • SSDEEP

    12288:cyUQUx7nZxWHTsDCnwWzsD4b80uBdsUx7duMpMJzxOGK0+eAq/:cyc7CHTmCrzG44BaI7du/y0gq/

Score
9/10
evasion

Malware Config

Targets

    • Target

      5fa480b8fdbd3fbd1eab570986cb7b93_JaffaCakes118

    • Size

      537KB

    • MD5

      5fa480b8fdbd3fbd1eab570986cb7b93

    • SHA1

      2e2e9f55e0156297b75d2d6f431d6665b4efb249

    • SHA256

      113e748e8463b4cc18e90fb125abfc005e7d65995d8968c1d7f2cab62edceac6

    • SHA512

      2184aa52b8b80b66c3ebc68c2d5bccb1c06599dbc89b10d5549baa6026fc22514f005170065551a3cf7391fd89af6bd472a6234bbaeae82be486dfbc4fbc13a0

    • SSDEEP

      12288:cyUQUx7nZxWHTsDCnwWzsD4b80uBdsUx7duMpMJzxOGK0+eAq/:cyc7CHTmCrzG44BaI7du/y0gq/

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks