e2767c98ca604617757441c03063deeb4e0e1bccc9da386d6274efb98d6bc69a | Triage

Sharing

General

Target

084248a7ea4ad9048e7b97cb4cc51452_JaffaCakes118
Size

924KB
Sample

241002-bwwwvazgrn
MD5

084248a7ea4ad9048e7b97cb4cc51452
SHA1

987108ddece8dc53651b9372caa6fe0c01b29399
SHA256

e2767c98ca604617757441c03063deeb4e0e1bccc9da386d6274efb98d6bc69a
SHA512

7bad32252556a299c546a7466763a19e1dbfc39bbe690ba3d01ea17014b794117f8ecaa262c8d439cd386630d88f0b89112e344a6e74f8828cb7b5cd6ef5deed
SSDEEP

24576:34H0b1KAEc20Mm6yiQQNN3iR1n7HNhf1aq246LlVtf6lJZY8tj:+0J7E4+AQH817HNhJ4VZ6JG8tj

Score

8^/10

discovery

Malware Config

Targets

- Target
  
  084248a7ea4ad9048e7b97cb4cc51452_JaffaCakes118
- Size
  
  924KB
- MD5
  
  084248a7ea4ad9048e7b97cb4cc51452
- SHA1
  
  987108ddece8dc53651b9372caa6fe0c01b29399
- SHA256
  
  e2767c98ca604617757441c03063deeb4e0e1bccc9da386d6274efb98d6bc69a
- SHA512
  
  7bad32252556a299c546a7466763a19e1dbfc39bbe690ba3d01ea17014b794117f8ecaa262c8d439cd386630d88f0b89112e344a6e74f8828cb7b5cd6ef5deed
- SSDEEP
  
  24576:34H0b1KAEc20Mm6yiQQNN3iR1n7HNhf1aq246LlVtf6lJZY8tj:+0J7E4+AQH817HNhJ4VZ6JG8tj
Score

8^/10

discovery
- Drops file in Drivers directory
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2