Overview

overview

9

Static

static

3

6e1f3702cc...18.exe

windows7-x64

1

6e1f3702cc...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6e1f3702cce702bcd5d0834fe5be208b_JaffaCakes118

  • Size

    666KB

  • Sample

    240524-lzgw7sdb95

  • MD5

    6e1f3702cce702bcd5d0834fe5be208b

  • SHA1

    0618f32de469eae546256b2df36b8c2e0b8fdc3a

  • SHA256

    15fd12cc86e204d7a3ca64480d8fa17431dfd33a6c6e6d4f33fa7bef9de6e836

  • SHA512

    5140bb9e85efa48db0a7e9fbfa97912aab56bd4eb50375e6f7d3da8e524132576d97c6cba0712ae535aa784322d63e9ee43c0da14c8b685f725cc422ad9b2cab

  • SSDEEP

    12288:qMy9Kdzy3fiNTXjMAHmtaW0rfoZ9kfC8uQ9UZT+6Xq:/y9KB/Rzby0rgYtuz+6Xq

Score
9/10
evasion

Malware Config

Targets

    • Target

      6e1f3702cce702bcd5d0834fe5be208b_JaffaCakes118

    • Size

      666KB

    • MD5

      6e1f3702cce702bcd5d0834fe5be208b

    • SHA1

      0618f32de469eae546256b2df36b8c2e0b8fdc3a

    • SHA256

      15fd12cc86e204d7a3ca64480d8fa17431dfd33a6c6e6d4f33fa7bef9de6e836

    • SHA512

      5140bb9e85efa48db0a7e9fbfa97912aab56bd4eb50375e6f7d3da8e524132576d97c6cba0712ae535aa784322d63e9ee43c0da14c8b685f725cc422ad9b2cab

    • SSDEEP

      12288:qMy9Kdzy3fiNTXjMAHmtaW0rfoZ9kfC8uQ9UZT+6Xq:/y9KB/Rzby0rgYtuz+6Xq

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks