Overview

overview

10

Static

static

3

ef2db42d2f...18.exe

windows7-x64

10

ef2db42d2f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef2db42d2fb581b3f838a01cbdea42b8_JaffaCakes118

  • Size

    4.1MB

  • Sample

    240921-gkjp2axgmr

  • MD5

    ef2db42d2fb581b3f838a01cbdea42b8

  • SHA1

    728a3b2a69f1388a5cdab82448b4e9db4627a4ac

  • SHA256

    e8b8f7711195d3ff912967c82ee2a12ba710ac9e717e8ee65f268bec0734ba54

  • SHA512

    2437f9ba3bb9d6f38972325de6ea91fadc43df9f4f683e83c8af5cebcf2057bf7bfd4ea736f252cd9a86810c86d65905eb13e04ef4a07d294f9868f05e93dd61

  • SSDEEP

    98304:Kj3FNprt8mfhBK/PWGh02oMPVa5rX0kq:Kj3NZ8y/qPBC2BPVa5Tq

Score
10/10
banloaddiscoverydownloaderdropperevasiontrojan

Malware Config

Targets

    • Target

      ef2db42d2fb581b3f838a01cbdea42b8_JaffaCakes118

    • Size

      4.1MB

    • MD5

      ef2db42d2fb581b3f838a01cbdea42b8

    • SHA1

      728a3b2a69f1388a5cdab82448b4e9db4627a4ac

    • SHA256

      e8b8f7711195d3ff912967c82ee2a12ba710ac9e717e8ee65f268bec0734ba54

    • SHA512

      2437f9ba3bb9d6f38972325de6ea91fadc43df9f4f683e83c8af5cebcf2057bf7bfd4ea736f252cd9a86810c86d65905eb13e04ef4a07d294f9868f05e93dd61

    • SSDEEP

      98304:Kj3FNprt8mfhBK/PWGh02oMPVa5rX0kq:Kj3NZ8y/qPBC2BPVa5Tq

    Score
    10/10
    banloaddiscoverydownloaderdropperevasiontrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks