2ce54622a2964a36435d34d1cc8800dacb43b980b540dac64f5636de286759ce | Triage

Sharing

General

Target

facf889a46495eed13a59381a60cc079_JaffaCakes118
Size

141KB
Sample

240419-v187hsaf58
MD5

facf889a46495eed13a59381a60cc079
SHA1

4f8c4272f62608da534285b69b4e2b5ff74255ee
SHA256

2ce54622a2964a36435d34d1cc8800dacb43b980b540dac64f5636de286759ce
SHA512

8ad8d007d6e2df545420d7934015af1afa45dd314f651778ab45a6576cb8388aedd444ed514c9f350365c180587fab2b90c101079a314b08e284a32653754a8e
SSDEEP

3072:Eomy9OVf/YYEezo8usyBoUvYYYD3zKneQygZgC0Pgs:Eo5GYYS8usMfYYO3TcZgCEg

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  facf889a46495eed13a59381a60cc079_JaffaCakes118
- Size
  
  141KB
- MD5
  
  facf889a46495eed13a59381a60cc079
- SHA1
  
  4f8c4272f62608da534285b69b4e2b5ff74255ee
- SHA256
  
  2ce54622a2964a36435d34d1cc8800dacb43b980b540dac64f5636de286759ce
- SHA512
  
  8ad8d007d6e2df545420d7934015af1afa45dd314f651778ab45a6576cb8388aedd444ed514c9f350365c180587fab2b90c101079a314b08e284a32653754a8e
- SSDEEP
  
  3072:Eomy9OVf/YYEezo8usyBoUvYYYD3zKneQygZgC0Pgs:Eo5GYYS8usMfYYO3TcZgCEg
Score

7^/10

bootkit persistence
- Executes dropped EXE
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2