General

  • Target
    jaffacakes118_not-a-virus.Downloader.Win32.Agent.kupe.c6851f4f3bfaef84eb37c38f1a030ce2
  • Size 112KB
  • Sample261014-ebdfjse191
  • SHA256 fb5d05b3c47b9958caf11a9017f3aa684dde72d24210e39ae8c5b9aabda68ea6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_not-a-virus.Downloader.Win32.Agent.kupe.c6851f4f3bfaef84eb37c38f1a030ce2
    • Size 112KB
    • SHA256 fb5d05b3c47b9958caf11a9017f3aa684dde72d24210e39ae8c5b9aabda68ea6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks