e3e162f1ef7f01923caa50b2a7e535c5ed917229e470acf7f40071e0e368f09b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feb3358f4361beebd94ba9b73fa1ea8f_JaffaCakes118
Size

427KB
Sample

240421-hnqs7aea21
MD5

feb3358f4361beebd94ba9b73fa1ea8f
SHA1

5d232f604287f5c74b95e595ef5065703f8cc41c
SHA256

e3e162f1ef7f01923caa50b2a7e535c5ed917229e470acf7f40071e0e368f09b
SHA512

3d943f6bd73596edff5282dc626e91fb4bb95988e302dfd9ae984d69f79d6f34e7d0a158a184a89da34e2cc29ae99d75f92525eeb0eb51311f8639b232b23d68
SSDEEP

12288:WIhuw/VntNekeYB0Rf7V1yan6b7MP+Dd2kw:WIhuwdtNeHxUae7MP+h2b

Score

6^/10

bootkit persistence

Malware Config

Targets

- Target
  
  feb3358f4361beebd94ba9b73fa1ea8f_JaffaCakes118
- Size
  
  427KB
- MD5
  
  feb3358f4361beebd94ba9b73fa1ea8f
- SHA1
  
  5d232f604287f5c74b95e595ef5065703f8cc41c
- SHA256
  
  e3e162f1ef7f01923caa50b2a7e535c5ed917229e470acf7f40071e0e368f09b
- SHA512
  
  3d943f6bd73596edff5282dc626e91fb4bb95988e302dfd9ae984d69f79d6f34e7d0a158a184a89da34e2cc29ae99d75f92525eeb0eb51311f8639b232b23d68
- SSDEEP
  
  12288:WIhuw/VntNekeYB0Rf7V1yan6b7MP+Dd2kw:WIhuwdtNeHxUae7MP+h2b
Score

6^/10

bootkit persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2