Analysis
- max time kernel
147s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
13/06/2024, 06:52
General
- Target a44a9bb8728feff5ea9dea14e3f303f0_JaffaCakes118.exe
- Size 2.4MB
- Sample240613-hndtmayarb
- SHA256 88f1a077ebf23d8379660224d06985fde832eae90aefb80c15263c83d43eb543
Score
7/10
Malware Config
Signatures
- Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
- Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a44a9bb8728feff5ea9dea14e3f303f0_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a44a9bb8728feff5ea9dea14e3f303f0_JaffaCakes118.exe"1⤵
- Checks BIOS information in registry
- Writes to the Master Boot Record (MBR)
- Checks processor information in registry
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/884-0-0x0000000001220000-0x0000000001221000-memory.dmp
memory/884-2-0x0000000001220000-0x0000000001221000-memory.dmp