Overview

overview

9

Static

static

3

9ffea5797d...18.exe

windows7-x64

1

9ffea5797d...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    9ffea5797df3ce84edd1635a39658434_JaffaCakes118

  • Size

    675KB

  • Sample

    240612-j5mnjavhmh

  • MD5

    9ffea5797df3ce84edd1635a39658434

  • SHA1

    65b60785af35604c7ff56435476637c78a420405

  • SHA256

    2026fb00d0db5fee224e5f690dd75161f67cb5c8042770aad38aab68007d36dc

  • SHA512

    6b869be5c70fcb93b6814aa504201b4f1ea838d4a1b5d3609aaa1f5037e7da1dc860cf11e8cff99a48f1d44b7d5c8e687be6a3fb1d3be42a21ec3eb2a8c472a7

  • SSDEEP

    12288:zgS/52f+ZMu6lWPt+7LF7mrCXH3H8aNk2xgNun0L6CW:US/5u7urFL0XH8aNk6IL6CW

Score
9/10
evasion

Malware Config

Targets

    • Target

      9ffea5797df3ce84edd1635a39658434_JaffaCakes118

    • Size

      675KB

    • MD5

      9ffea5797df3ce84edd1635a39658434

    • SHA1

      65b60785af35604c7ff56435476637c78a420405

    • SHA256

      2026fb00d0db5fee224e5f690dd75161f67cb5c8042770aad38aab68007d36dc

    • SHA512

      6b869be5c70fcb93b6814aa504201b4f1ea838d4a1b5d3609aaa1f5037e7da1dc860cf11e8cff99a48f1d44b7d5c8e687be6a3fb1d3be42a21ec3eb2a8c472a7

    • SSDEEP

      12288:zgS/52f+ZMu6lWPt+7LF7mrCXH3H8aNk2xgNun0L6CW:US/5u7urFL0XH8aNk6IL6CW

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks