Overview

overview

6

Static

static

3

fc3fc887fc...18.exe

windows7-x64

6

fc3fc887fc...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc3fc887fc31854da4b54e09c0a23574_JaffaCakes118

  • Size

    196KB

  • Sample

    240420-jdjgssbf94

  • MD5

    fc3fc887fc31854da4b54e09c0a23574

  • SHA1

    e958836d0008aadf15282e8a5aec6ba006ef761f

  • SHA256

    1860b91eb97c36e964b23453810495dd08472dafce378d8e2d4ceb603ad590fd

  • SHA512

    77ac51df0efef1b6e745ca7165315eeb1b3f9474a29e64a2490f45077369765db662007a2a8ee8d4a4fc53c320c8650f996c37bb87f8949848d4f0fbe33f94f3

  • SSDEEP

    6144:tDQYZADrmoaVBlbq63GBhHI3TaW3QstYFOf+41:pmDrZaLgBhHIGW3QsyFS

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      fc3fc887fc31854da4b54e09c0a23574_JaffaCakes118

    • Size

      196KB

    • MD5

      fc3fc887fc31854da4b54e09c0a23574

    • SHA1

      e958836d0008aadf15282e8a5aec6ba006ef761f

    • SHA256

      1860b91eb97c36e964b23453810495dd08472dafce378d8e2d4ceb603ad590fd

    • SHA512

      77ac51df0efef1b6e745ca7165315eeb1b3f9474a29e64a2490f45077369765db662007a2a8ee8d4a4fc53c320c8650f996c37bb87f8949848d4f0fbe33f94f3

    • SSDEEP

      6144:tDQYZADrmoaVBlbq63GBhHI3TaW3QstYFOf+41:pmDrZaLgBhHIGW3QsyFS

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks