General

  • Target

    fc6c0dda21dadd97e0b4e3842a0c6a31_JaffaCakes118

  • Size

    263KB

  • Sample

    240420-k8r8vsdh3y

  • MD5

    fc6c0dda21dadd97e0b4e3842a0c6a31

  • SHA1

    ceeac16b2bc939fba22c0154cd1a750e7b1aa5be

  • SHA256

    e546404480b9363ae68af184d73b86f44cfb3a1c15b048da3dfe09814a20dc9e

  • SHA512

    fb677b316767d9b1ba2e025404fea088d9189308064ac412957b1c0a46121c8ef833b26d9b0a4240715c19cb6c624cdd607960eaadfe5635b8e9ecc6af96b001

  • SSDEEP

    6144:uLr5atHtCAIdgVPFPVsRoDr4RshX6IMc8HuLfr:W5atTLP12R7iNMur

Malware Config

Targets

    • Target

      fc6c0dda21dadd97e0b4e3842a0c6a31_JaffaCakes118

    • Size

      263KB

    • MD5

      fc6c0dda21dadd97e0b4e3842a0c6a31

    • SHA1

      ceeac16b2bc939fba22c0154cd1a750e7b1aa5be

    • SHA256

      e546404480b9363ae68af184d73b86f44cfb3a1c15b048da3dfe09814a20dc9e

    • SHA512

      fb677b316767d9b1ba2e025404fea088d9189308064ac412957b1c0a46121c8ef833b26d9b0a4240715c19cb6c624cdd607960eaadfe5635b8e9ecc6af96b001

    • SSDEEP

      6144:uLr5atHtCAIdgVPFPVsRoDr4RshX6IMc8HuLfr:W5atTLP12R7iNMur

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Tasks