Overview

overview

9

Static

static

3

9d2984b3dc...18.exe

windows7-x64

1

9d2984b3dc...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    9d2984b3dcb86af3c9623d83a8eb154e_JaffaCakes118

  • Size

    664KB

  • Sample

    240611-gfsr5sxclq

  • MD5

    9d2984b3dcb86af3c9623d83a8eb154e

  • SHA1

    e9cbcab3500d8b33c861cc32fc1f08c0fa891e04

  • SHA256

    05a9ba6d3a6bfcd36b223a3e855053552afa859f64f0dd2d2787e97522ca64f0

  • SHA512

    cd6e45f8ed12339d5d65d2344f2840ab19a1a8cf2cf62a40f83c505c7e1a9a25d907307b2e8121ecba33b0125c6b8a7da7195b27d7a1ea521c21b788cd5c3810

  • SSDEEP

    12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16w:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1b

Score
9/10
evasion

Malware Config

Targets

    • Target

      9d2984b3dcb86af3c9623d83a8eb154e_JaffaCakes118

    • Size

      664KB

    • MD5

      9d2984b3dcb86af3c9623d83a8eb154e

    • SHA1

      e9cbcab3500d8b33c861cc32fc1f08c0fa891e04

    • SHA256

      05a9ba6d3a6bfcd36b223a3e855053552afa859f64f0dd2d2787e97522ca64f0

    • SHA512

      cd6e45f8ed12339d5d65d2344f2840ab19a1a8cf2cf62a40f83c505c7e1a9a25d907307b2e8121ecba33b0125c6b8a7da7195b27d7a1ea521c21b788cd5c3810

    • SSDEEP

      12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16w:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1b

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks