Analysis
-
max time kernel
145s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
05/04/2024, 01:10
Static task
static1
Behavioral task
behavioral1
Sample
c6bed843f9d68bd46a3d1b4880ee3cb1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c6bed843f9d68bd46a3d1b4880ee3cb1_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
c6bed843f9d68bd46a3d1b4880ee3cb1_JaffaCakes118.exe
-
Size
643KB
-
MD5
c6bed843f9d68bd46a3d1b4880ee3cb1
-
SHA1
a923f09ad4bc5b611e6c8d1b3371fefc675e0fd4
-
SHA256
8d9a60e84b9e2fe5cce761c4a180347ef357d740239fe139c2a80281933e2497
-
SHA512
0bfbf6d1e40eec2b013acd60546588768c9993cab3f4d1130b828916f11a96d6bd8008e8f972597723ca59da13ad00765661a0b615930ac5cff4f946c8421983
-
SSDEEP
12288:9w8LEGYw7H9NAegzh6VecRukmaTTfG/wSV4V8UtwsvH6sqzi4MZR:v7H9WePBQ+TTfGtu8Utwsis74
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PHYSICALDRIVE0 c6bed843f9d68bd46a3d1b4880ee3cb1_JaffaCakes118.exe