Overview

overview

10

Static

static

3

f744f2400e...18.exe

windows7-x64

10

f744f2400e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f744f2400e280cbfa73e9d38204228c0_JaffaCakes118

  • Size

    3.3MB

  • Sample

    241216-exwh9avqer

  • MD5

    f744f2400e280cbfa73e9d38204228c0

  • SHA1

    d5ef2ae9987b51c71f444d0b8cd845012ae94e08

  • SHA256

    8bd7d725ea0970a70e444fc5963b093a0d1e0e5d8aa433f23a1ca1267bdc7efc

  • SHA512

    69eae075dde8c935db0c28debce20ce1ded9df1e33762ff53dbd8398ccda828efe3d4c884862f02f67005521f2252b3153b25223b4d09ca9169a31166cbfad8d

  • SSDEEP

    49152:kSP6QPXU3GT6Vohg4N6GtMyMpy7vvKjBpgeu3W7jUcPPlR1X5mo+KH2cCPQAG:kSPbQp4NxPWG8PgN3CJR1X5mo+VPQ

Score
10/10
banloaddiscoverydownloaderdropperevasiontrojan

Malware Config

Targets

    • Target

      f744f2400e280cbfa73e9d38204228c0_JaffaCakes118

    • Size

      3.3MB

    • MD5

      f744f2400e280cbfa73e9d38204228c0

    • SHA1

      d5ef2ae9987b51c71f444d0b8cd845012ae94e08

    • SHA256

      8bd7d725ea0970a70e444fc5963b093a0d1e0e5d8aa433f23a1ca1267bdc7efc

    • SHA512

      69eae075dde8c935db0c28debce20ce1ded9df1e33762ff53dbd8398ccda828efe3d4c884862f02f67005521f2252b3153b25223b4d09ca9169a31166cbfad8d

    • SSDEEP

      49152:kSP6QPXU3GT6Vohg4N6GtMyMpy7vvKjBpgeu3W7jUcPPlR1X5mo+KH2cCPQAG:kSPbQp4NxPWG8PgN3CJR1X5mo+VPQ

    Score
    10/10
    banloaddiscoverydownloaderdropperevasiontrojan

    • Banload

      Banload variants download malicious files, then install and execute the files.

      trojandropperdownloaderbanload

    • Banload family

      banload

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks