Overview

overview

9

Static

static

3

eba5081b5e...18.exe

windows7-x64

9

eba5081b5e...18.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eba5081b5ebf59b8d1424dc02c3c9747_JaffaCakes118

  • Size

    524KB

  • Sample

    240919-s2eceswdlc

  • MD5

    eba5081b5ebf59b8d1424dc02c3c9747

  • SHA1

    445698520fae19630a964a21aa8788cfe1dda3e3

  • SHA256

    13a9087e79cc756bbc9d68e5a6071ce5a7d3012e00e27153d22d2649f8e885d5

  • SHA512

    4d65e662e43d2451384807dbf528db176b9f0f2edaa6c2ffe1284aad26a2cbc2e9a69f82054e29203c1db38a16ae2d842388af164a24c5fab0d8d592eb28f7ad

  • SSDEEP

    12288:AJuKBAjsT2ws4GrRu2QRqxqlOy8AF05yHk67zR960LF:AJuXsTuRRu2wqNGIyHr96i

Score
9/10
discoveryevasion

Malware Config

Targets

    • Target

      eba5081b5ebf59b8d1424dc02c3c9747_JaffaCakes118

    • Size

      524KB

    • MD5

      eba5081b5ebf59b8d1424dc02c3c9747

    • SHA1

      445698520fae19630a964a21aa8788cfe1dda3e3

    • SHA256

      13a9087e79cc756bbc9d68e5a6071ce5a7d3012e00e27153d22d2649f8e885d5

    • SHA512

      4d65e662e43d2451384807dbf528db176b9f0f2edaa6c2ffe1284aad26a2cbc2e9a69f82054e29203c1db38a16ae2d842388af164a24c5fab0d8d592eb28f7ad

    • SSDEEP

      12288:AJuKBAjsT2ws4GrRu2QRqxqlOy8AF05yHk67zR960LF:AJuXsTuRRu2wqNGIyHr96i

    Score
    9/10
    discoveryevasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks