e07d275d5471267b6bf8524a63b63503b32fec8b024ac0ddf212a9cd922a0673

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
21/09/2024, 17:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

f042303f7f5eb42a9e8974cdfca86f10_JaffaCakes118.exe
Size

143KB
MD5

f042303f7f5eb42a9e8974cdfca86f10
SHA1

065b3fdc1cccb88ace4805272d8e9d919fb53980
SHA256

e07d275d5471267b6bf8524a63b63503b32fec8b024ac0ddf212a9cd922a0673
SHA512

032c6630da314999f3a607592b4bf5b4ab1d54c68d5486853b3912eeda42cd101875495cc042601b7ce138d43b6662d47f1717099e902d9078faf07e72bdfa68
SSDEEP

1536:05qAjuiWeegFLH5pLwifhr5R4Eza+fDL0kxjR4Y58hKOWsmOmOWH/850uPl3:nAjYevj5HhYsttqKOWH/850Sl

Score

7^/10

Malware Config

Signatures

Checks BIOS information in registry 2 TTPs 1 IoCs

BIOS information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosDate	f042303f7f5eb42a9e8974cdfca86f10_JaffaCakes118.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	f042303f7f5eb42a9e8974cdfca86f10_JaffaCakes118.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	f042303f7f5eb42a9e8974cdfca86f10_JaffaCakes118.exe

Enumerates system info in registry 2 TTPs 1 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosDate	f042303f7f5eb42a9e8974cdfca86f10_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\f042303f7f5eb42a9e8974cdfca86f10_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f042303f7f5eb42a9e8974cdfca86f10_JaffaCakes118.exe"
1⤵
- Checks BIOS information in registry
- Checks processor information in registry
- Enumerates system info in registry
PID:2692

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads