Overview

overview

7

Static

static

7

fd918088a7...18.exe

windows7-x64

7

fd918088a7...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd918088a792d8806ffaff122ead860c_JaffaCakes118

  • Size

    318KB

  • Sample

    240420-y5xk3ahe9s

  • MD5

    fd918088a792d8806ffaff122ead860c

  • SHA1

    76635d3799e22c6a46f10ceaf65e8cfd855c90f7

  • SHA256

    4a190bd40f3f547003768c95fe1784d496e7f20bc4aa8eced0ac71d9d3d7154c

  • SHA512

    6c9f20f9dcfbff8d1c794f56e0c0f083b6b138954d516b474d8672fcfec879ea30026295eb25480d34d706c93d7ca31cc8f4c7f633c136963da799f44e199a74

  • SSDEEP

    6144:lBi0opKqS046DFa3w+o++dsxlPpkCTv3qi/GehOscsJbfe/WJYKN:B3K46DElolaP3JG0OshJbfWWLN

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      fd918088a792d8806ffaff122ead860c_JaffaCakes118

    • Size

      318KB

    • MD5

      fd918088a792d8806ffaff122ead860c

    • SHA1

      76635d3799e22c6a46f10ceaf65e8cfd855c90f7

    • SHA256

      4a190bd40f3f547003768c95fe1784d496e7f20bc4aa8eced0ac71d9d3d7154c

    • SHA512

      6c9f20f9dcfbff8d1c794f56e0c0f083b6b138954d516b474d8672fcfec879ea30026295eb25480d34d706c93d7ca31cc8f4c7f633c136963da799f44e199a74

    • SSDEEP

      6144:lBi0opKqS046DFa3w+o++dsxlPpkCTv3qi/GehOscsJbfe/WJYKN:B3K46DElolaP3JG0OshJbfWWLN

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks