Overview

overview

9

Static

static

3

7da595b760...18.exe

windows7-x64

9

7da595b760...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    7da595b760481c9fdb0477cf359a4ffc_JaffaCakes118

  • Size

    675KB

  • Sample

    240528-t5yqxaca6t

  • MD5

    7da595b760481c9fdb0477cf359a4ffc

  • SHA1

    3399876272bb271cc1b794afb8339dc68948ed35

  • SHA256

    219b0c548fb92395482e1ca9beb1dc7f7f4b549fbfdf731941ec768db25532a8

  • SHA512

    5451f653a126ca58f48620754040fbff88cf9b42602a892f995735342ed5444482b960a9ed591faba778daa33c772d1b9f56be30995222a18152da95b8c50a2f

  • SSDEEP

    12288:zgS/52f+ZMu6lWPt+7LF7mrCXH3H8aNk2xgNun0L6A:US/5u7urFL0XH8aNk6IL6A

Score
9/10
evasion

Malware Config

Targets

    • Target

      7da595b760481c9fdb0477cf359a4ffc_JaffaCakes118

    • Size

      675KB

    • MD5

      7da595b760481c9fdb0477cf359a4ffc

    • SHA1

      3399876272bb271cc1b794afb8339dc68948ed35

    • SHA256

      219b0c548fb92395482e1ca9beb1dc7f7f4b549fbfdf731941ec768db25532a8

    • SHA512

      5451f653a126ca58f48620754040fbff88cf9b42602a892f995735342ed5444482b960a9ed591faba778daa33c772d1b9f56be30995222a18152da95b8c50a2f

    • SSDEEP

      12288:zgS/52f+ZMu6lWPt+7LF7mrCXH3H8aNk2xgNun0L6A:US/5u7urFL0XH8aNk6IL6A

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks