Overview

overview

6

Static

static

3

fa7f0e28d9...18.exe

windows7-x64

6

fa7f0e28d9...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa7f0e28d9a459e344da350443698df6_JaffaCakes118

  • Size

    455KB

  • Sample

    240419-rreprsef37

  • MD5

    fa7f0e28d9a459e344da350443698df6

  • SHA1

    60e72c23b0f1fe2b53762c0422c28d9905bf0b49

  • SHA256

    d0036c25f65fb4c4d20c3a71b0569a2c64ff7e31bff0d44724a90b89e07ac62c

  • SHA512

    318c011d7f22290ce1d8c84edc9625b31c264df0cbfcd7d588132f5312077e5776a780cd18733533ab8175ef50a31f00d15d057ad550475eea1398771e640c4c

  • SSDEEP

    12288:0bMJ24z1IFr12b0mXGuHsHfnY8W1K3DnsIfFtU5:0e24z6CAeGuM/nNW4Ds+HM

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      fa7f0e28d9a459e344da350443698df6_JaffaCakes118

    • Size

      455KB

    • MD5

      fa7f0e28d9a459e344da350443698df6

    • SHA1

      60e72c23b0f1fe2b53762c0422c28d9905bf0b49

    • SHA256

      d0036c25f65fb4c4d20c3a71b0569a2c64ff7e31bff0d44724a90b89e07ac62c

    • SHA512

      318c011d7f22290ce1d8c84edc9625b31c264df0cbfcd7d588132f5312077e5776a780cd18733533ab8175ef50a31f00d15d057ad550475eea1398771e640c4c

    • SSDEEP

      12288:0bMJ24z1IFr12b0mXGuHsHfnY8W1K3DnsIfFtU5:0e24z6CAeGuM/nNW4Ds+HM

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks