Overview

overview

9

Static

static

3

862cf8825a...18.exe

windows7-x64

9

862cf8825a...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    862cf8825aa54d2467d25b78b0874145_JaffaCakes118

  • Size

    514KB

  • Sample

    240531-gvz5rshe3v

  • MD5

    862cf8825aa54d2467d25b78b0874145

  • SHA1

    84ef18dde22bbd1cb08527221d9101310c7730c9

  • SHA256

    249cc39a3a0474107ce29b38d6b88efd7237f097ea739d12cced23d347520a24

  • SHA512

    c202d556a2f76db22e6625fe6d0b6ab60402a2d66ef6ab05af757d824ae057ce723f0b289c3d318fd4568aa18e03845ba5d8cace3554d13d5de9926e195a7731

  • SSDEEP

    12288:J8U6sBwlrjT0k+g/QoRePwF0sOuUhaPGx8YXX8r//:J8U6hjTnQoRMwK+IaYXX8rn

Score
9/10
evasion

Malware Config

Targets

    • Target

      862cf8825aa54d2467d25b78b0874145_JaffaCakes118

    • Size

      514KB

    • MD5

      862cf8825aa54d2467d25b78b0874145

    • SHA1

      84ef18dde22bbd1cb08527221d9101310c7730c9

    • SHA256

      249cc39a3a0474107ce29b38d6b88efd7237f097ea739d12cced23d347520a24

    • SHA512

      c202d556a2f76db22e6625fe6d0b6ab60402a2d66ef6ab05af757d824ae057ce723f0b289c3d318fd4568aa18e03845ba5d8cace3554d13d5de9926e195a7731

    • SSDEEP

      12288:J8U6sBwlrjT0k+g/QoRePwF0sOuUhaPGx8YXX8r//:J8U6hjTnQoRMwK+IaYXX8rn

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks