Overview

overview

8

Static

static

3

fd83fd822c...18.exe

windows7-x64

8

fd83fd822c...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd83fd822cfc2968e650a85fefa40262_JaffaCakes118

  • Size

    348KB

  • Sample

    240420-ylrwgagh7y

  • MD5

    fd83fd822cfc2968e650a85fefa40262

  • SHA1

    448f76adae4f9d6b5ce0faf63891534667c078d0

  • SHA256

    c357e8a1c726aba10cc1eee37c92013807f765659be8d2549946ee6ce1740274

  • SHA512

    c39468c3e35a5c5d09c96636828216e196119ed62c8161029ddbf856d22516bb720c240267f3e2f736acef8fefdfc20770769718202ef66fadad06f5c26c79a6

  • SSDEEP

    6144:AThJya3kvgQTLzQUmSFhBwqEwvP6bQ7yMP+DE827WMylwvP6bQ7yMP+DE827F:AThJyaE0U1HBwg6b7MP+Dd2ag6b7MP+Y

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      fd83fd822cfc2968e650a85fefa40262_JaffaCakes118

    • Size

      348KB

    • MD5

      fd83fd822cfc2968e650a85fefa40262

    • SHA1

      448f76adae4f9d6b5ce0faf63891534667c078d0

    • SHA256

      c357e8a1c726aba10cc1eee37c92013807f765659be8d2549946ee6ce1740274

    • SHA512

      c39468c3e35a5c5d09c96636828216e196119ed62c8161029ddbf856d22516bb720c240267f3e2f736acef8fefdfc20770769718202ef66fadad06f5c26c79a6

    • SSDEEP

      6144:AThJya3kvgQTLzQUmSFhBwqEwvP6bQ7yMP+DE827WMylwvP6bQ7yMP+DE827F:AThJyaE0U1HBwg6b7MP+Dd2ag6b7MP+Y

    Score
    8/10
    bootkitpersistence

    • Drops file in Drivers directory

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks