Overview

overview

9

Static

static

3

95af3d0eec...18.exe

windows7-x64

1

95af3d0eec...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    95af3d0eecd39bb3c46afb2c75c67ddb_JaffaCakes118

  • Size

    671KB

  • Sample

    240604-v1zm3sea2x

  • MD5

    95af3d0eecd39bb3c46afb2c75c67ddb

  • SHA1

    23d0a1ad3f3fa9ddc9b4c588b80094a86818df98

  • SHA256

    12fc8a650a703e71cb3d2f609b4ac0ff1bd4cfd9d7a92da41aa763b663923d0b

  • SHA512

    484f964a4f850c4608f68ce5ce1318020cc7174359f4e403f20e2e6a8281cce25d2667ffa2ce19453621007ef009cfcfd26815389c6c5963cd1e2357e46a3a97

  • SSDEEP

    12288:SZJ7G1zskWtP44444ItPZkTKpPwHb/dgusOlMLSTQNirbCfrL6t:qJ7Uzj4yUo7Fdle8WIbCL6t

Score
9/10
evasion

Malware Config

Targets

    • Target

      95af3d0eecd39bb3c46afb2c75c67ddb_JaffaCakes118

    • Size

      671KB

    • MD5

      95af3d0eecd39bb3c46afb2c75c67ddb

    • SHA1

      23d0a1ad3f3fa9ddc9b4c588b80094a86818df98

    • SHA256

      12fc8a650a703e71cb3d2f609b4ac0ff1bd4cfd9d7a92da41aa763b663923d0b

    • SHA512

      484f964a4f850c4608f68ce5ce1318020cc7174359f4e403f20e2e6a8281cce25d2667ffa2ce19453621007ef009cfcfd26815389c6c5963cd1e2357e46a3a97

    • SSDEEP

      12288:SZJ7G1zskWtP44444ItPZkTKpPwHb/dgusOlMLSTQNirbCfrL6t:qJ7Uzj4yUo7Fdle8WIbCL6t

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks