Overview

overview

9

Static

static

3

9bb75165e4...18.exe

windows7-x64

1

9bb75165e4...18.exe

windows10-2004-x64

9

Resubmissions

10/06/2024, 19:33

240610-x9hr2ayarm 9

10/06/2024, 19:15

240610-xylpjsxcmd 9

Sharing

Copy URL Twitter E-mail

General

  • Target

    9bb75165e48a6de3c4c6e677ca5aab96_JaffaCakes118

  • Size

    701KB

  • Sample

    240610-xylpjsxcmd

  • MD5

    9bb75165e48a6de3c4c6e677ca5aab96

  • SHA1

    01653612ef0287bea1ed8fe21afe1372ccf0d829

  • SHA256

    05bce310633ed312871947343fcf7a6ea9b9dc93739f716aa4e1f5e4f1d41ce5

  • SHA512

    230d7266548f8ae44efe46f471262017d30a14007f2fd523ef4059f53fa8f847cb750e1ece90b71c11850b7497aa5f2cbdbbeed6b7bd7dcc90083ad8e511dd0e

  • SSDEEP

    12288:ZBwq6VFMFXpComESVXbTcUNUQ8Oog2cazH+jUv7wIHylWmFDwqJd/Os:/B6VF8C1ESVXboH9jVHF7wIHgHF3/Os

Score
9/10
evasion

Malware Config

Targets

    • Target

      9bb75165e48a6de3c4c6e677ca5aab96_JaffaCakes118

    • Size

      701KB

    • MD5

      9bb75165e48a6de3c4c6e677ca5aab96

    • SHA1

      01653612ef0287bea1ed8fe21afe1372ccf0d829

    • SHA256

      05bce310633ed312871947343fcf7a6ea9b9dc93739f716aa4e1f5e4f1d41ce5

    • SHA512

      230d7266548f8ae44efe46f471262017d30a14007f2fd523ef4059f53fa8f847cb750e1ece90b71c11850b7497aa5f2cbdbbeed6b7bd7dcc90083ad8e511dd0e

    • SSDEEP

      12288:ZBwq6VFMFXpComESVXbTcUNUQ8Oog2cazH+jUv7wIHylWmFDwqJd/Os:/B6VF8C1ESVXboH9jVHF7wIHgHF3/Os

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks