Overview

overview

9

Static

static

3

a24186eba1...18.exe

windows7-x64

9

a24186eba1...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    a24186eba19663c690fc9c98baf90569_JaffaCakes118

  • Size

    537KB

  • Sample

    240612-zflypsyhrh

  • MD5

    a24186eba19663c690fc9c98baf90569

  • SHA1

    2a7b555acffd1a9aad6df5e2689f829d96c064c8

  • SHA256

    04a58206a6b8e7d9098f83b764f985ddde8e520e9e45309ee6dbf684de98a462

  • SHA512

    8347d1d7bb4b8306d594814795bb5b898a40d1f9ee8e8bdb371d5ef4e70696faa0fc6ba0a13e1ec0f005c3c826d9078db0bcd12857b78118fe0809a37b3359ca

  • SSDEEP

    12288:ut33wIhELgGST0boJJEQZ3ENXgokgLkTqkZaiXime0XdENss:ut1h+ST0LjCCLkekEFd+s

Score
9/10
evasion

Malware Config

Targets

    • Target

      a24186eba19663c690fc9c98baf90569_JaffaCakes118

    • Size

      537KB

    • MD5

      a24186eba19663c690fc9c98baf90569

    • SHA1

      2a7b555acffd1a9aad6df5e2689f829d96c064c8

    • SHA256

      04a58206a6b8e7d9098f83b764f985ddde8e520e9e45309ee6dbf684de98a462

    • SHA512

      8347d1d7bb4b8306d594814795bb5b898a40d1f9ee8e8bdb371d5ef4e70696faa0fc6ba0a13e1ec0f005c3c826d9078db0bcd12857b78118fe0809a37b3359ca

    • SSDEEP

      12288:ut33wIhELgGST0boJJEQZ3ENXgokgLkTqkZaiXime0XdENss:ut1h+ST0LjCCLkekEFd+s

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks