Overview

overview

6

Static

static

3

fbd5b04c39...18.exe

windows7-x64

6

fbd5b04c39...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbd5b04c3979374aadb3586eb3dc873d_JaffaCakes118

  • Size

    210KB

  • Sample

    240420-d495jsfc94

  • MD5

    fbd5b04c3979374aadb3586eb3dc873d

  • SHA1

    b8fcf50e41efc23514b20ca795a5542360a88477

  • SHA256

    8f141b6923d6a6c7cef98a72065fc619e99d510a13a3543b6344553313734d73

  • SHA512

    403210460c62ecfb44819dfa5d2ae716bc9eeb203e6bf9737cbbee175433d70d38ecf4bc354c27fbf78e345d18444948b477d7f34b8744a98e6fb31781264e52

  • SSDEEP

    6144:mebUhx57Dle98gWNlPTGQQm6agrdy2usEQu:m/DXNtTirdy2CT

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      fbd5b04c3979374aadb3586eb3dc873d_JaffaCakes118

    • Size

      210KB

    • MD5

      fbd5b04c3979374aadb3586eb3dc873d

    • SHA1

      b8fcf50e41efc23514b20ca795a5542360a88477

    • SHA256

      8f141b6923d6a6c7cef98a72065fc619e99d510a13a3543b6344553313734d73

    • SHA512

      403210460c62ecfb44819dfa5d2ae716bc9eeb203e6bf9737cbbee175433d70d38ecf4bc354c27fbf78e345d18444948b477d7f34b8744a98e6fb31781264e52

    • SSDEEP

      6144:mebUhx57Dle98gWNlPTGQQm6agrdy2usEQu:m/DXNtTirdy2CT

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks