Overview

overview

9

Static

static

3

66071ddadd...18.exe

windows7-x64

9

66071ddadd...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    66071ddadd429f1b829e2de42e55b093_JaffaCakes118

  • Size

    638KB

  • Sample

    240522-fa7tfacc73

  • MD5

    66071ddadd429f1b829e2de42e55b093

  • SHA1

    6bcfc22e04ac54f6db25d7b15cf179b246b3d313

  • SHA256

    2448eaa2e3b8596be0e226248f2385be0f90586df907e431c4e8b68667cfed9a

  • SHA512

    f474365debc74eac45d1747ddfd180b6040ed01c6d3252e65901cf0d97e69472b894bb3280f79b29a57316bde21817c135b6d8c53338219e19a4016f7c239c54

  • SSDEEP

    12288:hmrT/NtMTbIhcvPMLxa8bzzyUoCyhRB2Sjy7Xrxti3rwbX1W38oZ1f6jB3B4:QrT/Nt3AML1XRykdzltqm8r3f6jBW

Score
9/10
evasion

Malware Config

Targets

    • Target

      66071ddadd429f1b829e2de42e55b093_JaffaCakes118

    • Size

      638KB

    • MD5

      66071ddadd429f1b829e2de42e55b093

    • SHA1

      6bcfc22e04ac54f6db25d7b15cf179b246b3d313

    • SHA256

      2448eaa2e3b8596be0e226248f2385be0f90586df907e431c4e8b68667cfed9a

    • SHA512

      f474365debc74eac45d1747ddfd180b6040ed01c6d3252e65901cf0d97e69472b894bb3280f79b29a57316bde21817c135b6d8c53338219e19a4016f7c239c54

    • SSDEEP

      12288:hmrT/NtMTbIhcvPMLxa8bzzyUoCyhRB2Sjy7Xrxti3rwbX1W38oZ1f6jB3B4:QrT/Nt3AML1XRykdzltqm8r3f6jBW

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks