6f84b062624a9766682c8296e061fc0e7736705518b4ebd1b11f41b1c95afc2f | Triage

Sharing

General

Target

f3ecc0d8c67936faa79a0735dfd11deb_JaffaCakes118
Size

100KB
Sample

240416-vkm94shb3t
MD5

f3ecc0d8c67936faa79a0735dfd11deb
SHA1

d20237f0884e07eaa8d624f763b2300a3513293f
SHA256

6f84b062624a9766682c8296e061fc0e7736705518b4ebd1b11f41b1c95afc2f
SHA512

146671a591a8b82b122736405c2eff024899b054432c3370327c84fb667400f0acce517297761061ac5be7f290b9b52ea5d15def4f5a8a3ccc1fbcad5681dd9a
SSDEEP

1536:ZU6K2cupcazZDLroP6EU39Usa7w7+S3gDuJ4:C6EmDLroP6EU+Hw7lgaJ4

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  f3ecc0d8c67936faa79a0735dfd11deb_JaffaCakes118
- Size
  
  100KB
- MD5
  
  f3ecc0d8c67936faa79a0735dfd11deb
- SHA1
  
  d20237f0884e07eaa8d624f763b2300a3513293f
- SHA256
  
  6f84b062624a9766682c8296e061fc0e7736705518b4ebd1b11f41b1c95afc2f
- SHA512
  
  146671a591a8b82b122736405c2eff024899b054432c3370327c84fb667400f0acce517297761061ac5be7f290b9b52ea5d15def4f5a8a3ccc1fbcad5681dd9a
- SSDEEP
  
  1536:ZU6K2cupcazZDLroP6EU39Usa7w7+S3gDuJ4:C6EmDLroP6EU+Hw7lgaJ4
Score

7^/10

bootkit persistence
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Pre-OS Boot

Bootkit

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence