Overview

overview

7

Static

static

3

fabc3d5d50...18.exe

windows7-x64

7

fabc3d5d50...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fabc3d5d50b3519aa76a986b5aca1e2e_JaffaCakes118

  • Size

    869KB

  • Sample

    240419-vavlfaae6t

  • MD5

    fabc3d5d50b3519aa76a986b5aca1e2e

  • SHA1

    fd87b55e3642e312359483eb33d086c495fa296f

  • SHA256

    4958f4216dc3a6075f44d198d7eac9956ad85aa26f9f65d66e18a46d420ea636

  • SHA512

    407524356bfe3fa69cf65d9bb9f0f371f8a1f09d013d56de3489710f8e430233f0b9514bcd503fc63da41f920bb7df3721454e61cfed5527cc70766717439d9b

  • SSDEEP

    24576:bsKFvsqDWA3TpADpXe6SeT+hM2wrqI7BI4/Gk:pPn3VRnqrqBgX

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      fabc3d5d50b3519aa76a986b5aca1e2e_JaffaCakes118

    • Size

      869KB

    • MD5

      fabc3d5d50b3519aa76a986b5aca1e2e

    • SHA1

      fd87b55e3642e312359483eb33d086c495fa296f

    • SHA256

      4958f4216dc3a6075f44d198d7eac9956ad85aa26f9f65d66e18a46d420ea636

    • SHA512

      407524356bfe3fa69cf65d9bb9f0f371f8a1f09d013d56de3489710f8e430233f0b9514bcd503fc63da41f920bb7df3721454e61cfed5527cc70766717439d9b

    • SSDEEP

      24576:bsKFvsqDWA3TpADpXe6SeT+hM2wrqI7BI4/Gk:pPn3VRnqrqBgX

    Score
    7/10
    bootkitpersistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks