0c2cfd4fbb230552b8bca49814c00cacebc01db68027069db0f42490f79ea5f5 | Triage

Sharing

General

Target

fa5f5032cc07bde971131c725898ed65_JaffaCakes118
Size

72KB
Sample

240419-qhe4haec7x
MD5

fa5f5032cc07bde971131c725898ed65
SHA1

b0b0a4d9d322ef41dee8c8e78beca21762c5853e
SHA256

0c2cfd4fbb230552b8bca49814c00cacebc01db68027069db0f42490f79ea5f5
SHA512

6b24f71944484404d654a7eb9e2e8ebcbd4dfc91b110db5d8c9d18b0b3611bcbe8abb7ebc8c75a765b98d8286650daea949a5e1d18af33be6a462623a7eb1f5f
SSDEEP

1536:IuLyU1iD7MQsSpPXmCSYdToBwPqb8KFXs:IuL7iMQsSpXmCzoBwKHFXs

Score

6^/10

bootkit discovery persistence

Malware Config

Targets

- Target
  
  fa5f5032cc07bde971131c725898ed65_JaffaCakes118
- Size
  
  72KB
- MD5
  
  fa5f5032cc07bde971131c725898ed65
- SHA1
  
  b0b0a4d9d322ef41dee8c8e78beca21762c5853e
- SHA256
  
  0c2cfd4fbb230552b8bca49814c00cacebc01db68027069db0f42490f79ea5f5
- SHA512
  
  6b24f71944484404d654a7eb9e2e8ebcbd4dfc91b110db5d8c9d18b0b3611bcbe8abb7ebc8c75a765b98d8286650daea949a5e1d18af33be6a462623a7eb1f5f
- SSDEEP
  
  1536:IuLyU1iD7MQsSpPXmCSYdToBwPqb8KFXs:IuL7iMQsSpXmCzoBwKHFXs
Score

6^/10

bootkit discovery persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

bootkitdiscoverypersistence

behavioral2