Overview

overview

6

Static

static

3

fcd15dbccd...18.exe

windows7-x64

6

fcd15dbccd...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fcd15dbccd032c74664ef69964c5a2b6_JaffaCakes118

  • Size

    16KB

  • Sample

    240420-p8zp6ahc63

  • MD5

    fcd15dbccd032c74664ef69964c5a2b6

  • SHA1

    faa4559001782481781c96c6aab7afe91de33db4

  • SHA256

    786b8126b7d82a0c7dd477583e42b881b665a0db8ef985e80843bec7133bec66

  • SHA512

    c81f76b5a21514d2568dca728b8f3af9d8e3ec71c8518ad9936695534f6b9d0dae0aa8a4e9e61af2edf1cec088547479aa66b5f41381743f1eab723131843d29

  • SSDEEP

    384:5gK+aczPVLXOjtYel7ZZH9Ej3MoYn8N1YmnrtFyxAt:5I/1Ojt1nuYGYYtFKq

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      fcd15dbccd032c74664ef69964c5a2b6_JaffaCakes118

    • Size

      16KB

    • MD5

      fcd15dbccd032c74664ef69964c5a2b6

    • SHA1

      faa4559001782481781c96c6aab7afe91de33db4

    • SHA256

      786b8126b7d82a0c7dd477583e42b881b665a0db8ef985e80843bec7133bec66

    • SHA512

      c81f76b5a21514d2568dca728b8f3af9d8e3ec71c8518ad9936695534f6b9d0dae0aa8a4e9e61af2edf1cec088547479aa66b5f41381743f1eab723131843d29

    • SSDEEP

      384:5gK+aczPVLXOjtYel7ZZH9Ej3MoYn8N1YmnrtFyxAt:5I/1Ojt1nuYGYYtFKq

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks