General

  • Target

    933d4a779309aedb897816b62f2bc6ce_JaffaCakes118

  • Size

    524KB

  • Sample

    240604-bh8y9afh4v

  • MD5

    933d4a779309aedb897816b62f2bc6ce

  • SHA1

    2c0ce939e79f3ec5658b1824356163c21446166c

  • SHA256

    13e5fa7bb7c75ee80c3ca6671880fe5a0b146028adb63f845415cad9ed07fbd8

  • SHA512

    e430a37862f192f47c555f0258f451db1b859edcb76b0f110a092dbeea4259999e857ffab98effef5156efc6a7889c5dbed328b9d99b814c93004231f2055138

  • SSDEEP

    12288:AJuKBAjsT2ws4GrRu2QRqxqlOy8AF05yHk67zR960LF:AJuXsTuRRu2wqNGIyHr96i

Score
9/10

Malware Config

Targets

    • Target

      933d4a779309aedb897816b62f2bc6ce_JaffaCakes118

    • Size

      524KB

    • MD5

      933d4a779309aedb897816b62f2bc6ce

    • SHA1

      2c0ce939e79f3ec5658b1824356163c21446166c

    • SHA256

      13e5fa7bb7c75ee80c3ca6671880fe5a0b146028adb63f845415cad9ed07fbd8

    • SHA512

      e430a37862f192f47c555f0258f451db1b859edcb76b0f110a092dbeea4259999e857ffab98effef5156efc6a7889c5dbed328b9d99b814c93004231f2055138

    • SSDEEP

      12288:AJuKBAjsT2ws4GrRu2QRqxqlOy8AF05yHk67zR960LF:AJuXsTuRRu2wqNGIyHr96i

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks