Overview

overview

9

Static

static

3

ddaac9e5b0...18.exe

windows7-x64

9

ddaac9e5b0...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    ddaac9e5b077a8f58b116e6e1881ba4e_JaffaCakes118

  • Size

    563KB

  • Sample

    240913-e1nmtatgpm

  • MD5

    ddaac9e5b077a8f58b116e6e1881ba4e

  • SHA1

    29b31e67c2404f206967c40816e154339c2e0282

  • SHA256

    20c6201b61e8f23d82c9a43dcee136efaa410a2940e259b59b71f9934951c33d

  • SHA512

    5f71598c6a13c6760eb1937e7af553bd5c7bcd1df360e03eb255bb886befc74bb32af259bbd1dade8e36351369b8567b0ba64792f32b8a53ec054e1fb4030b37

  • SSDEEP

    12288:4HL34qssnTUvqjw3AvmYsOa3OX9dLe18z8es1/qOzGncR5Wj2:ML34unT6A4ONkT3Sqyc82

Score
9/10
discoveryevasion

Malware Config

Targets

    • Target

      ddaac9e5b077a8f58b116e6e1881ba4e_JaffaCakes118

    • Size

      563KB

    • MD5

      ddaac9e5b077a8f58b116e6e1881ba4e

    • SHA1

      29b31e67c2404f206967c40816e154339c2e0282

    • SHA256

      20c6201b61e8f23d82c9a43dcee136efaa410a2940e259b59b71f9934951c33d

    • SHA512

      5f71598c6a13c6760eb1937e7af553bd5c7bcd1df360e03eb255bb886befc74bb32af259bbd1dade8e36351369b8567b0ba64792f32b8a53ec054e1fb4030b37

    • SSDEEP

      12288:4HL34qssnTUvqjw3AvmYsOa3OX9dLe18z8es1/qOzGncR5Wj2:ML34unT6A4ONkT3Sqyc82

    Score
    9/10
    discoveryevasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks