General
-
Target
fab8060ce15da0ff5c825a5ef4b1fc1a_JaffaCakes118
-
Size
328KB
-
Sample
240419-t4l1qahc84
-
MD5
fab8060ce15da0ff5c825a5ef4b1fc1a
-
SHA1
e69ab29a76e85b60190b12e052a1325e397c0f77
-
SHA256
5a2df2d8673399be5a23cf6312f8aec770802c5177e105d2eca75a860df61924
-
SHA512
f0b9ab15f29e09b95cdff1d4be7294c519e77d3a33e43b5d814b9d93d06ed16f7316e687c7b44c2606c245c8baa5121636a4e143aa8dc2a621bc2eaca39c9065
-
SSDEEP
6144:ycMedZ3FTDSm9PXfrtVNgzSdVr3gRGPKuSUzzjtGF3f8j0nNr3iCwHad6mvp9kp:f9Z3FTDx9PP51T3dPNzjcxvr3iC/6s/4
Behavioral task
behavioral1
Sample
fab8060ce15da0ff5c825a5ef4b1fc1a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fab8060ce15da0ff5c825a5ef4b1fc1a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
fab8060ce15da0ff5c825a5ef4b1fc1a_JaffaCakes118
-
Size
328KB
-
MD5
fab8060ce15da0ff5c825a5ef4b1fc1a
-
SHA1
e69ab29a76e85b60190b12e052a1325e397c0f77
-
SHA256
5a2df2d8673399be5a23cf6312f8aec770802c5177e105d2eca75a860df61924
-
SHA512
f0b9ab15f29e09b95cdff1d4be7294c519e77d3a33e43b5d814b9d93d06ed16f7316e687c7b44c2606c245c8baa5121636a4e143aa8dc2a621bc2eaca39c9065
-
SSDEEP
6144:ycMedZ3FTDSm9PXfrtVNgzSdVr3gRGPKuSUzzjtGF3f8j0nNr3iCwHad6mvp9kp:f9Z3FTDx9PP51T3dPNzjcxvr3iC/6s/4
Score7/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-