Overview

overview

7

Static

static

7

f940c87d7c...18.exe

windows7-x64

7

f940c87d7c...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f940c87d7c8ae488637f490255eb4b44_JaffaCakes118

  • Size

    322KB

  • Sample

    240419-cdn9qaef7y

  • MD5

    f940c87d7c8ae488637f490255eb4b44

  • SHA1

    c324ca08b4927d88750451c1598b2ddc5ac3b779

  • SHA256

    8ebf109b74b896e2d61ba68cfc73437bbc92088bd5a4012441bf2906495b1722

  • SHA512

    816dc287fd100391327b4098198b536e8ce9fc7c6b9f2f05b52e8ea8993b968a05bb3b0bf2f6c92e85f22c8716f1704330aeac7e98f186dd0da2a5b6d087262a

  • SSDEEP

    6144:VxB8H88vF4+HcMqG/c1P+Xk6jcREO+//RPWGi0Ypuv93VrJ:VxB8HTN4OGG/c12pj5D/QGiFM9T

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      f940c87d7c8ae488637f490255eb4b44_JaffaCakes118

    • Size

      322KB

    • MD5

      f940c87d7c8ae488637f490255eb4b44

    • SHA1

      c324ca08b4927d88750451c1598b2ddc5ac3b779

    • SHA256

      8ebf109b74b896e2d61ba68cfc73437bbc92088bd5a4012441bf2906495b1722

    • SHA512

      816dc287fd100391327b4098198b536e8ce9fc7c6b9f2f05b52e8ea8993b968a05bb3b0bf2f6c92e85f22c8716f1704330aeac7e98f186dd0da2a5b6d087262a

    • SSDEEP

      6144:VxB8H88vF4+HcMqG/c1P+Xk6jcREO+//RPWGi0Ypuv93VrJ:VxB8HTN4OGG/c12pj5D/QGiFM9T

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks