General

  • Target

    8c7768bec5c02d0d31207e5439558e64_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240602-bxlr9seh54

  • MD5

    8c7768bec5c02d0d31207e5439558e64

  • SHA1

    9716e25830df37b3bb4a2f246386ed217dd04fe0

  • SHA256

    0bff96b6c68b208fd1eb47057a26e2feedfb9e3ee334351078712d837e3898e2

  • SHA512

    bea601fb811242ab796e41106f5370f988abf37a7d9646410e9f0a51af406e5eccda68f2ea36030661d6ed4d69338e1b739de86c2db798b56a8eb1bfbc4d2df8

  • SSDEEP

    24576:tYnP0MeimjbF1kpyj60g1nR79/gMx2KQd:tCP0Jn39jURBoQdQ

Score
7/10

Malware Config

Targets

    • Target

      8c7768bec5c02d0d31207e5439558e64_JaffaCakes118

    • Size

      1.1MB

    • MD5

      8c7768bec5c02d0d31207e5439558e64

    • SHA1

      9716e25830df37b3bb4a2f246386ed217dd04fe0

    • SHA256

      0bff96b6c68b208fd1eb47057a26e2feedfb9e3ee334351078712d837e3898e2

    • SHA512

      bea601fb811242ab796e41106f5370f988abf37a7d9646410e9f0a51af406e5eccda68f2ea36030661d6ed4d69338e1b739de86c2db798b56a8eb1bfbc4d2df8

    • SSDEEP

      24576:tYnP0MeimjbF1kpyj60g1nR79/gMx2KQd:tCP0Jn39jURBoQdQ

    Score
    7/10
    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Loads dropped DLL

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks