Overview

overview

10

Static

static

1

6f72d6ac97...18.exe

windows7-x64

10

6f72d6ac97...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6f72d6ac9788c50e228693355a7d7bea_JaffaCakes118

  • Size

    1.8MB

  • Sample

    240524-w5175seg3z

  • MD5

    6f72d6ac9788c50e228693355a7d7bea

  • SHA1

    f46230ce078bb84f2e8a0f14a4d9d054edefe1d2

  • SHA256

    f6570ae31293c8aaab8eec3471aac36ee136d14c567bbb1c09c40366c524835d

  • SHA512

    22e2587529bd176fc7e5a41014a3ddff9d2b80169cb249b60e0f1dd0f56ae37849c4e71dfd39cda84aec80c5ecb3e03e5a2b8602d60084a54bc270cd18e980e2

  • SSDEEP

    49152:ovMW2NU1HlwukfJT2tszpaPFlB90q5VWy7EeNgc:o0hNOFwuNszpaPFlvPtQA5

Score
10/10
banloaddownloaderdropperevasiontrojan

Malware Config

Targets

    • Target

      6f72d6ac9788c50e228693355a7d7bea_JaffaCakes118

    • Size

      1.8MB

    • MD5

      6f72d6ac9788c50e228693355a7d7bea

    • SHA1

      f46230ce078bb84f2e8a0f14a4d9d054edefe1d2

    • SHA256

      f6570ae31293c8aaab8eec3471aac36ee136d14c567bbb1c09c40366c524835d

    • SHA512

      22e2587529bd176fc7e5a41014a3ddff9d2b80169cb249b60e0f1dd0f56ae37849c4e71dfd39cda84aec80c5ecb3e03e5a2b8602d60084a54bc270cd18e980e2

    • SSDEEP

      49152:ovMW2NU1HlwukfJT2tszpaPFlB90q5VWy7EeNgc:o0hNOFwuNszpaPFlvPtQA5

    Score
    10/10
    banloaddownloaderdropperevasiontrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks