Overview

overview

9

Static

static

3

6426181ae4...18.exe

windows7-x64

9

6426181ae4...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    6426181ae452896a40f47e375cc5d470_JaffaCakes118

  • Size

    516KB

  • Sample

    240521-v26ssada6z

  • MD5

    6426181ae452896a40f47e375cc5d470

  • SHA1

    d55f33c67aad43d93c266b4073987294c07ef54e

  • SHA256

    61b6ecd3ad7fcfa722ed287c8b13f9afaacbe5e2acd422a31443ce0cf2fb52cc

  • SHA512

    4dac48eef0683d656f91a34ee2778d6902f6bd1b34965fc898107ed01a4d1e297bf3744a93a31c3d83d4b69a0896200fff2d0b0ac9edae8c8ccd796a1867551e

  • SSDEEP

    6144:/Kw9ZuL+7TBufhHztxTBIp2ZrPs+JiifYPeyy8JAt3kgURi34wgC1:/Kw9ZuL+7TQfhhcGTs+lYWyp+tcyNZ

Score
9/10
evasion

Malware Config

Targets

    • Target

      6426181ae452896a40f47e375cc5d470_JaffaCakes118

    • Size

      516KB

    • MD5

      6426181ae452896a40f47e375cc5d470

    • SHA1

      d55f33c67aad43d93c266b4073987294c07ef54e

    • SHA256

      61b6ecd3ad7fcfa722ed287c8b13f9afaacbe5e2acd422a31443ce0cf2fb52cc

    • SHA512

      4dac48eef0683d656f91a34ee2778d6902f6bd1b34965fc898107ed01a4d1e297bf3744a93a31c3d83d4b69a0896200fff2d0b0ac9edae8c8ccd796a1867551e

    • SSDEEP

      6144:/Kw9ZuL+7TBufhHztxTBIp2ZrPs+JiifYPeyy8JAt3kgURi34wgC1:/Kw9ZuL+7TQfhhcGTs+lYWyp+tcyNZ

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks