Overview

overview

9

Static

static

3

63eb3b18f0...18.exe

windows7-x64

9

63eb3b18f0...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63eb3b18f08ddd593f0f0cf8edb7327e_JaffaCakes118

  • Size

    512KB

  • Sample

    240521-tpmcyabe6y

  • MD5

    63eb3b18f08ddd593f0f0cf8edb7327e

  • SHA1

    3b3540f0f30f75d4d237464d5336e96329b34217

  • SHA256

    06f46f73fcdd6f9ce1c39c3d2cb33f76eec6d540946ed108204e1d5779f8f530

  • SHA512

    50920a80b7c58ede8c0c59ba2708acb88bc6a50c5d238b1f16e90b7f642bf83311d482996c70f3f36af48c3b5600acf5c0daeb514b113c66b342c9f7c91b76d5

  • SSDEEP

    12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4D:0+h9OY70z+warul3E4D

Score
9/10
evasion

Malware Config

Targets

    • Target

      63eb3b18f08ddd593f0f0cf8edb7327e_JaffaCakes118

    • Size

      512KB

    • MD5

      63eb3b18f08ddd593f0f0cf8edb7327e

    • SHA1

      3b3540f0f30f75d4d237464d5336e96329b34217

    • SHA256

      06f46f73fcdd6f9ce1c39c3d2cb33f76eec6d540946ed108204e1d5779f8f530

    • SHA512

      50920a80b7c58ede8c0c59ba2708acb88bc6a50c5d238b1f16e90b7f642bf83311d482996c70f3f36af48c3b5600acf5c0daeb514b113c66b342c9f7c91b76d5

    • SSDEEP

      12288:0+h9St2Ma70zIIc91Dwws4zruXic2O/3E4D:0+h9OY70z+warul3E4D

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks