Overview

overview

6

Static

static

1

fa89f8791d...18.exe

windows7-x64

6

fa89f8791d...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa89f8791dfaf4ab8ef219bffd508b8e_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240419-r74c3afa89

  • MD5

    fa89f8791dfaf4ab8ef219bffd508b8e

  • SHA1

    091ac74284449d935cbd690813698f595bcb9977

  • SHA256

    5078e7fe9f4608b1c09410fb28481ec5902100001408f3c7ede010861dfee0d3

  • SHA512

    ca7e025c71223154260f19a15ae0e18a18d1836486a573737fae12a45168a6b455246e3dd0cd8cb96ffa4eec260e98574109d27c4cf05f17c5810671dad8438e

  • SSDEEP

    24576:r/oM8SLYWNInsMfnDOm6iFv2VTBVVF/Nq5R7sy:zD8SLYW6np/DOm6VVT//Nk9n

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      fa89f8791dfaf4ab8ef219bffd508b8e_JaffaCakes118

    • Size

      1.2MB

    • MD5

      fa89f8791dfaf4ab8ef219bffd508b8e

    • SHA1

      091ac74284449d935cbd690813698f595bcb9977

    • SHA256

      5078e7fe9f4608b1c09410fb28481ec5902100001408f3c7ede010861dfee0d3

    • SHA512

      ca7e025c71223154260f19a15ae0e18a18d1836486a573737fae12a45168a6b455246e3dd0cd8cb96ffa4eec260e98574109d27c4cf05f17c5810671dad8438e

    • SSDEEP

      24576:r/oM8SLYWNInsMfnDOm6iFv2VTBVVF/Nq5R7sy:zD8SLYW6np/DOm6VVT//Nk9n

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks