Overview

overview

9

Static

static

3

638ece7c69...18.exe

windows7-x64

9

638ece7c69...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    638ece7c6971008a07ebe276cb5332fb_JaffaCakes118

  • Size

    538KB

  • Sample

    240521-re128sgf6z

  • MD5

    638ece7c6971008a07ebe276cb5332fb

  • SHA1

    fafe9f28d99e982c01d53b25511e300c095c3dc2

  • SHA256

    1e65a4645d991110ebc203ee4c1b72b7fcec8918949dc58432738e3d096a0cf2

  • SHA512

    b152a6a66776a59f720a71f47394b7e60089d2d2b392279e7ec4a0ef8ebea8534995556109500d95b7816286565b28f009b5c8c475041fc6cde4a8ca8a7bffa0

  • SSDEEP

    12288:6Yhcq8xzZTkQ4DDfO+lDp5QBooT3oDznHbUl0il67L5:BhcTZTaDfXNQCrPbGa/5

Score
9/10
evasion

Malware Config

Targets

    • Target

      638ece7c6971008a07ebe276cb5332fb_JaffaCakes118

    • Size

      538KB

    • MD5

      638ece7c6971008a07ebe276cb5332fb

    • SHA1

      fafe9f28d99e982c01d53b25511e300c095c3dc2

    • SHA256

      1e65a4645d991110ebc203ee4c1b72b7fcec8918949dc58432738e3d096a0cf2

    • SHA512

      b152a6a66776a59f720a71f47394b7e60089d2d2b392279e7ec4a0ef8ebea8534995556109500d95b7816286565b28f009b5c8c475041fc6cde4a8ca8a7bffa0

    • SSDEEP

      12288:6Yhcq8xzZTkQ4DDfO+lDp5QBooT3oDznHbUl0il67L5:BhcTZTaDfXNQCrPbGa/5

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks