Overview

overview

7

Static

static

7

f9b4d1d0ff...18.exe

windows7-x64

7

f9b4d1d0ff...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f9b4d1d0ffc385a8c371763da2a6195c_JaffaCakes118

  • Size

    318KB

  • Sample

    240419-g9kzdsbh8w

  • MD5

    f9b4d1d0ffc385a8c371763da2a6195c

  • SHA1

    192eab2fb723d0daf9e436c031b1d07601273569

  • SHA256

    35d0596244d7828c1008aeab08bdbb75dea0961e58519a81f2a773066c57b4c6

  • SHA512

    250f31df998ee894f2e0d944bf54d1e872eadcc557650d53b98417ba19f92fb2bf19669641df4a98f6e724ca808f51297e1fef7392bd94c9f33dc2d34b5af354

  • SSDEEP

    6144:waPq9qMJ7S2+A2kplVLDnp3JD6sRaWeF0025CFwYbBj0H9HZOJgIUUSL60:xS9HY2+mPBn36OeuD5CFpm95ZIUpL60

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      f9b4d1d0ffc385a8c371763da2a6195c_JaffaCakes118

    • Size

      318KB

    • MD5

      f9b4d1d0ffc385a8c371763da2a6195c

    • SHA1

      192eab2fb723d0daf9e436c031b1d07601273569

    • SHA256

      35d0596244d7828c1008aeab08bdbb75dea0961e58519a81f2a773066c57b4c6

    • SHA512

      250f31df998ee894f2e0d944bf54d1e872eadcc557650d53b98417ba19f92fb2bf19669641df4a98f6e724ca808f51297e1fef7392bd94c9f33dc2d34b5af354

    • SSDEEP

      6144:waPq9qMJ7S2+A2kplVLDnp3JD6sRaWeF0025CFwYbBj0H9HZOJgIUUSL60:xS9HY2+mPBn36OeuD5CFpm95ZIUpL60

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks