Overview

overview

7

Static

static

3

fccdc04ee8...18.exe

windows7-x64

7

fccdc04ee8...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fccdc04ee89c15c2e7b16f55a0a0ab35_JaffaCakes118

  • Size

    610KB

  • Sample

    240420-p3fp4ahg6v

  • MD5

    fccdc04ee89c15c2e7b16f55a0a0ab35

  • SHA1

    820b72ff0ddb6a92cf76827c1964b396887ebaf7

  • SHA256

    2538e7d4bc9a10b9abab0c3a13f3680984f967b2314291334de6c506f54ad528

  • SHA512

    bcf3f08e0b55f41f58c79bc84c1c9a0e2d75697c49d5653939a345ccecc02a08d2008ec06ddafd60256e1e2f18261b25c08254f025e60a1419d175b9c94e3407

  • SSDEEP

    12288:GOu73KNUqD1Kp1bgSX4y9rPWi2t/pVthg7:lu73KNUhNgSXjjWth

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      fccdc04ee89c15c2e7b16f55a0a0ab35_JaffaCakes118

    • Size

      610KB

    • MD5

      fccdc04ee89c15c2e7b16f55a0a0ab35

    • SHA1

      820b72ff0ddb6a92cf76827c1964b396887ebaf7

    • SHA256

      2538e7d4bc9a10b9abab0c3a13f3680984f967b2314291334de6c506f54ad528

    • SHA512

      bcf3f08e0b55f41f58c79bc84c1c9a0e2d75697c49d5653939a345ccecc02a08d2008ec06ddafd60256e1e2f18261b25c08254f025e60a1419d175b9c94e3407

    • SSDEEP

      12288:GOu73KNUqD1Kp1bgSX4y9rPWi2t/pVthg7:lu73KNUhNgSXjjWth

    Score
    7/10
    bootkitpersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks