Overview

overview

6

Static

static

3

fa9508a20c...18.exe

windows7-x64

6

fa9508a20c...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa9508a20ce26806622155c0ce513afa_JaffaCakes118

  • Size

    213KB

  • Sample

    240419-snh4fsge2t

  • MD5

    fa9508a20ce26806622155c0ce513afa

  • SHA1

    a2e27157ef24bb6b6a2302167ad0f02a986f831e

  • SHA256

    2e6603c4521e0d1a262d657f02ef3e43b9ca2ede90fbbc5fb7359bb1e358342e

  • SHA512

    e79a2035fdc6fc7ea8e91d3396373d203e15782902044ac8f515b4cf0e1a38801e02e11f50793e428226f44592f27e432a1dd00c9c27f9ff13c409ae193474dd

  • SSDEEP

    6144:kl6ZwGRFso3Y4TyQOI5JgpcvqNplc/M4DE:U6eGRCQdT0Iw5pR4E

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      fa9508a20ce26806622155c0ce513afa_JaffaCakes118

    • Size

      213KB

    • MD5

      fa9508a20ce26806622155c0ce513afa

    • SHA1

      a2e27157ef24bb6b6a2302167ad0f02a986f831e

    • SHA256

      2e6603c4521e0d1a262d657f02ef3e43b9ca2ede90fbbc5fb7359bb1e358342e

    • SHA512

      e79a2035fdc6fc7ea8e91d3396373d203e15782902044ac8f515b4cf0e1a38801e02e11f50793e428226f44592f27e432a1dd00c9c27f9ff13c409ae193474dd

    • SSDEEP

      6144:kl6ZwGRFso3Y4TyQOI5JgpcvqNplc/M4DE:U6eGRCQdT0Iw5pR4E

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks