Overview

overview

9

Static

static

3

689b0a9aec...18.exe

windows7-x64

1

689b0a9aec...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    689b0a9aeceaee39734f590f3ca9be38_JaffaCakes118

  • Size

    667KB

  • Sample

    240522-zrbxwagd84

  • MD5

    689b0a9aeceaee39734f590f3ca9be38

  • SHA1

    476b4d1fabef3d869685e299c6f586ee8346f01e

  • SHA256

    2474c5592f5b9796845890757d6c8610c443c4a45cf240626d85313f46443575

  • SHA512

    488b33f173100aa148fcc973e16d572546d63ea3bbcfdad83c999b97d55855256b7183acd993c8e8944a48fb9b283d3fb2685d7c6223c5da8f7f19e08913fec6

  • SSDEEP

    12288:T8rqkM4RxFPeGUEyD8V5SJVvImhxhBDRR6Oifc3OY3MCP9rdOb6s:QrqkM4AGUAjSJVrhxhZRCYljOb6s

Score
9/10
evasion

Malware Config

Targets

    • Target

      689b0a9aeceaee39734f590f3ca9be38_JaffaCakes118

    • Size

      667KB

    • MD5

      689b0a9aeceaee39734f590f3ca9be38

    • SHA1

      476b4d1fabef3d869685e299c6f586ee8346f01e

    • SHA256

      2474c5592f5b9796845890757d6c8610c443c4a45cf240626d85313f46443575

    • SHA512

      488b33f173100aa148fcc973e16d572546d63ea3bbcfdad83c999b97d55855256b7183acd993c8e8944a48fb9b283d3fb2685d7c6223c5da8f7f19e08913fec6

    • SSDEEP

      12288:T8rqkM4RxFPeGUEyD8V5SJVvImhxhBDRR6Oifc3OY3MCP9rdOb6s:QrqkM4AGUAjSJVrhxhZRCYljOb6s

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks