Overview

overview

6

Static

static

3

fbf39ddaa8...18.dll

windows7-x64

6

fbf39ddaa8...18.dll

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbf39ddaa887886b9ec3e527504d51cf_JaffaCakes118

  • Size

    412KB

  • Sample

    240420-fb9z7ahe8z

  • MD5

    fbf39ddaa887886b9ec3e527504d51cf

  • SHA1

    e7b9679335ecc3c14e558387ca5e5573dbcd5aae

  • SHA256

    844362ce92cfc8adbade9e49b6871ffdf09861c377ae735e16139afa98935c94

  • SHA512

    4d76295050fb6a6d28599f0f3c0e993e474c8952d4bf064de4e09d40c2014eab3aad8f31ce733d3e63c4e5ed1b5d20e71633f6376e6fb558906ff363967f45ef

  • SSDEEP

    12288:YSgfGQBPVQLlTjo6y48GDbPfq9hpTBKJGEtN:YS6QLdo748Yfq9ZKkoN

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      fbf39ddaa887886b9ec3e527504d51cf_JaffaCakes118

    • Size

      412KB

    • MD5

      fbf39ddaa887886b9ec3e527504d51cf

    • SHA1

      e7b9679335ecc3c14e558387ca5e5573dbcd5aae

    • SHA256

      844362ce92cfc8adbade9e49b6871ffdf09861c377ae735e16139afa98935c94

    • SHA512

      4d76295050fb6a6d28599f0f3c0e993e474c8952d4bf064de4e09d40c2014eab3aad8f31ce733d3e63c4e5ed1b5d20e71633f6376e6fb558906ff363967f45ef

    • SSDEEP

      12288:YSgfGQBPVQLlTjo6y48GDbPfq9hpTBKJGEtN:YS6QLdo748Yfq9ZKkoN

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks