Overview

overview

7

Static

static

7

fb304ac09b...18.exe

windows7-x64

7

fb304ac09b...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb304ac09b0a5714639608a7fb87bba4_JaffaCakes118

  • Size

    241KB

  • Sample

    240419-z7phxafh66

  • MD5

    fb304ac09b0a5714639608a7fb87bba4

  • SHA1

    1a2e4338a1c73f02cdfe3cd0e59cb16965b0fd2a

  • SHA256

    33d67e22fca18fb463eee5d078566795f781498bf14845f376bd8e874a75cf97

  • SHA512

    92e3a3867993813aa111e15cafed9de4de565b307c4679920932b9ec6902bb2dcc2be4839bcf87601063407a543d38aec587de182fc21736e1d1642b649d002d

  • SSDEEP

    6144:JkeENDvTSn2SV/GuhYdViC7X57+nMDI9BIaWe:JNEND/k/GLPX57+nyI9BfWe

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      fb304ac09b0a5714639608a7fb87bba4_JaffaCakes118

    • Size

      241KB

    • MD5

      fb304ac09b0a5714639608a7fb87bba4

    • SHA1

      1a2e4338a1c73f02cdfe3cd0e59cb16965b0fd2a

    • SHA256

      33d67e22fca18fb463eee5d078566795f781498bf14845f376bd8e874a75cf97

    • SHA512

      92e3a3867993813aa111e15cafed9de4de565b307c4679920932b9ec6902bb2dcc2be4839bcf87601063407a543d38aec587de182fc21736e1d1642b649d002d

    • SSDEEP

      6144:JkeENDvTSn2SV/GuhYdViC7X57+nMDI9BIaWe:JNEND/k/GLPX57+nyI9BfWe

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks