e17313e548adeb9f0dcb5a05af7e98fed2d2a36f9ec27e74997e06e1b50e0d08 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e898a462e17b7b76a28c6bb532449533_JaffaCakes118
Size

471KB
Sample

240408-2np2faea27
MD5

e898a462e17b7b76a28c6bb532449533
SHA1

4b72c687640960fe9196d62ac8c7705067b4a093
SHA256

e17313e548adeb9f0dcb5a05af7e98fed2d2a36f9ec27e74997e06e1b50e0d08
SHA512

795e095c2a7d15fc01d98b3532a3b325ac2d22f66b5b232e7d443c6d575745616000903feb31d1d6c64c1af431af3711d95c622b3ba594de22b3ec7c87f1d618
SSDEEP

6144:2FP5KmElEoV9a8nEobA8hIuuxLbKMHy4GcIFC6SHFEm9+wuOtVUuaJy0PAEIrtAX:2SPxa4EUP0nKMHy4LHFEm9+wFV/axIe

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  e898a462e17b7b76a28c6bb532449533_JaffaCakes118
- Size
  
  471KB
- MD5
  
  e898a462e17b7b76a28c6bb532449533
- SHA1
  
  4b72c687640960fe9196d62ac8c7705067b4a093
- SHA256
  
  e17313e548adeb9f0dcb5a05af7e98fed2d2a36f9ec27e74997e06e1b50e0d08
- SHA512
  
  795e095c2a7d15fc01d98b3532a3b325ac2d22f66b5b232e7d443c6d575745616000903feb31d1d6c64c1af431af3711d95c622b3ba594de22b3ec7c87f1d618
- SSDEEP
  
  6144:2FP5KmElEoV9a8nEobA8hIuuxLbKMHy4GcIFC6SHFEm9+wuOtVUuaJy0PAEIrtAX:2SPxa4EUP0nKMHy4LHFEm9+wFV/axIe
Score

7^/10

bootkit persistence
- Executes dropped EXE
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2