Overview

overview

6

Static

static

3

fa20625320...18.exe

windows7-x64

6

fa20625320...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa206253202bc85f184ec77e196b8d50_JaffaCakes118

  • Size

    207KB

  • Sample

    240419-mrk5bshg4w

  • MD5

    fa206253202bc85f184ec77e196b8d50

  • SHA1

    e031e14faa7290c11ff6871805620b9d77ea131d

  • SHA256

    a2424e632af10cc1dde80cfe2c292d302a6e2457320b3188836f4f3cae0640af

  • SHA512

    04675a55176473ba4deef5c70636a16d056ae3a2007a5cbf3c935a916f9282a592b07916efcdb8c84bafc8e5313b91614f02301bbbe0abf5565272af2d0ae48a

  • SSDEEP

    6144:qva08a3Ahun+aC1meyUGimMOIAjymLcFjI7:mW1meyUGpvymItW

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      fa206253202bc85f184ec77e196b8d50_JaffaCakes118

    • Size

      207KB

    • MD5

      fa206253202bc85f184ec77e196b8d50

    • SHA1

      e031e14faa7290c11ff6871805620b9d77ea131d

    • SHA256

      a2424e632af10cc1dde80cfe2c292d302a6e2457320b3188836f4f3cae0640af

    • SHA512

      04675a55176473ba4deef5c70636a16d056ae3a2007a5cbf3c935a916f9282a592b07916efcdb8c84bafc8e5313b91614f02301bbbe0abf5565272af2d0ae48a

    • SSDEEP

      6144:qva08a3Ahun+aC1meyUGimMOIAjymLcFjI7:mW1meyUGpvymItW

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks