4cfb0a95169f40ad06faf0302b1e7a2b2ee9b54d1a44b2ee8122882be35763b8 | Triage

Sharing

General

Target

fb1aacad1da39257afb54d90dd676e07_JaffaCakes118
Size

632KB
Sample

240419-y768aafd81
MD5

fb1aacad1da39257afb54d90dd676e07
SHA1

a57348789baa1e7055220744689f5c7ef3d2fe86
SHA256

4cfb0a95169f40ad06faf0302b1e7a2b2ee9b54d1a44b2ee8122882be35763b8
SHA512

efe7eab5925b5ad5441d6f58fcba178f767491f165165c8ac8aed01277fe6f5e6ce9347861caaae27fa1acf626328aacc03598df78f253ff2cf041a4f09e2d32
SSDEEP

12288:qOTnvvAnnws1q1Pe5X+pIQ4bpx2PB3MmwuZri4wXLAvcT1zg:qOUni1G5X+pIQi8PB3MBuZri4wGcThg

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  fb1aacad1da39257afb54d90dd676e07_JaffaCakes118
- Size
  
  632KB
- MD5
  
  fb1aacad1da39257afb54d90dd676e07
- SHA1
  
  a57348789baa1e7055220744689f5c7ef3d2fe86
- SHA256
  
  4cfb0a95169f40ad06faf0302b1e7a2b2ee9b54d1a44b2ee8122882be35763b8
- SHA512
  
  efe7eab5925b5ad5441d6f58fcba178f767491f165165c8ac8aed01277fe6f5e6ce9347861caaae27fa1acf626328aacc03598df78f253ff2cf041a4f09e2d32
- SSDEEP
  
  12288:qOTnvvAnnws1q1Pe5X+pIQ4bpx2PB3MmwuZri4wXLAvcT1zg:qOUni1G5X+pIQi8PB3MBuZri4wGcThg
Score

7^/10

bootkit persistence
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence