Overview

overview

7

Static

static

7

fbfbb4c13c...18.exe

windows7-x64

7

fbfbb4c13c...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbfbb4c13cde3fe93c6d35db644b4010_JaffaCakes118

  • Size

    487KB

  • Sample

    240420-fnvq2ahh91

  • MD5

    fbfbb4c13cde3fe93c6d35db644b4010

  • SHA1

    838f34070cb05796d5103f9f335961eace70170d

  • SHA256

    bb03dc355e19c6da8474b79e2b70ec93a1d4c3552841e8f86cb9c4054eafc96a

  • SHA512

    89f6521f37b0a65208eda1c31358f6008d2dc313bc07b3aacd58b15ae9349d47f5c94d0bbd0356a7edb125d07533f3cb68e812176633026c857667d1a0877730

  • SSDEEP

    6144:Z/S4ucTcJWzYXUe4bpCWe0oXjXYFFmZNpmjL:EcTcJWEEe4CWe0AXYTmZa/

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      fbfbb4c13cde3fe93c6d35db644b4010_JaffaCakes118

    • Size

      487KB

    • MD5

      fbfbb4c13cde3fe93c6d35db644b4010

    • SHA1

      838f34070cb05796d5103f9f335961eace70170d

    • SHA256

      bb03dc355e19c6da8474b79e2b70ec93a1d4c3552841e8f86cb9c4054eafc96a

    • SHA512

      89f6521f37b0a65208eda1c31358f6008d2dc313bc07b3aacd58b15ae9349d47f5c94d0bbd0356a7edb125d07533f3cb68e812176633026c857667d1a0877730

    • SSDEEP

      6144:Z/S4ucTcJWzYXUe4bpCWe0oXjXYFFmZNpmjL:EcTcJWEEe4CWe0AXYTmZa/

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks