General

  • Target

    fad05b29cb610145e6b83e781e4eb044_JaffaCakes118

  • Size

    116KB

  • Sample

    240419-v3xw9saf95

  • MD5

    fad05b29cb610145e6b83e781e4eb044

  • SHA1

    ef7ad0f593d38ef93111b289b5e3537a5227dde5

  • SHA256

    dcadcc285e7262d2f9f138e7c3ff0fa1ceca1d06d9e15c151f38eaa4f0a60eed

  • SHA512

    2f77d320f5f38e820dfc29da9b977447f6809c840c33fbed3d11ce46c96d520e64789ce6b35978b375b3cf1711dd2644b8142c72a07874afcfa0d57f2a0875ea

  • SSDEEP

    1536:qcU+ec3KbmYT3R1vS42Tne/xRjvlZagwM3HD:qN+ec3KbmYbPV2TnephvlZagf

Malware Config

Targets

    • Target

      fad05b29cb610145e6b83e781e4eb044_JaffaCakes118

    • Size

      116KB

    • MD5

      fad05b29cb610145e6b83e781e4eb044

    • SHA1

      ef7ad0f593d38ef93111b289b5e3537a5227dde5

    • SHA256

      dcadcc285e7262d2f9f138e7c3ff0fa1ceca1d06d9e15c151f38eaa4f0a60eed

    • SHA512

      2f77d320f5f38e820dfc29da9b977447f6809c840c33fbed3d11ce46c96d520e64789ce6b35978b375b3cf1711dd2644b8142c72a07874afcfa0d57f2a0875ea

    • SSDEEP

      1536:qcU+ec3KbmYT3R1vS42Tne/xRjvlZagwM3HD:qN+ec3KbmYbPV2TnephvlZagf

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Discovery

Query Registry

1
T1012

Tasks