General

  • Target

    a3dfe49e23271d8224e85263002119b5_JaffaCakes118

  • Size

    664KB

  • Sample

    240613-fgl6baycmm

  • MD5

    a3dfe49e23271d8224e85263002119b5

  • SHA1

    9cd80e078f7db5c6bfd2a9e0f9b42f35f0434ce8

  • SHA256

    341db1a879deb81f787d650c1290f9aad907c34494f965c9c9d67933465ae757

  • SHA512

    dd716a57bdc61bbb470f32979940a17fa69d417d538ab02900b583288686a9f54a045d9b23261e39f3123e421ecc85d682af962eb27d875d5306823d35f6a584

  • SSDEEP

    12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16I:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1n

Score
9/10

Malware Config

Targets

    • Target

      a3dfe49e23271d8224e85263002119b5_JaffaCakes118

    • Size

      664KB

    • MD5

      a3dfe49e23271d8224e85263002119b5

    • SHA1

      9cd80e078f7db5c6bfd2a9e0f9b42f35f0434ce8

    • SHA256

      341db1a879deb81f787d650c1290f9aad907c34494f965c9c9d67933465ae757

    • SHA512

      dd716a57bdc61bbb470f32979940a17fa69d417d538ab02900b583288686a9f54a045d9b23261e39f3123e421ecc85d682af962eb27d875d5306823d35f6a584

    • SSDEEP

      12288:YTf5y14kK0RuPZf1HW9Yui4IRYK2VO0X9bDIFVhB0ZJE+Xhs16I:Wf5yCkqZf129YupJ9O0X9b0FVDqEcC1n

    Score
    9/10
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks