Overview

overview

6

Static

static

3

ffbf4abd03...18.exe

windows7-x64

6

ffbf4abd03...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ffbf4abd03dc885ad954ef045df79509_JaffaCakes118

  • Size

    120KB

  • Sample

    240421-vgbrxafh7w

  • MD5

    ffbf4abd03dc885ad954ef045df79509

  • SHA1

    f5fe3f0a926c8662c7396aace74caad815f6131c

  • SHA256

    dcae93c2cb02cad5456572acd4394de059263674b684b0de200a921139e8607a

  • SHA512

    6278789de47c18bd9565eceb743e788608cbca9bb03b652e356684898737b7025f9572312be7175e9f9ccdd448b4a498232c32a74002b25d0c83a82eb1b82f0c

  • SSDEEP

    1536:y/XL8/csjgrmSz4GNy53AW+NLa9KXFMFYRAHQsePL3nP2KEfX2jX2LZyhI:yoBgakNO3gs9KXFhety3uKIX2jX2L/

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      ffbf4abd03dc885ad954ef045df79509_JaffaCakes118

    • Size

      120KB

    • MD5

      ffbf4abd03dc885ad954ef045df79509

    • SHA1

      f5fe3f0a926c8662c7396aace74caad815f6131c

    • SHA256

      dcae93c2cb02cad5456572acd4394de059263674b684b0de200a921139e8607a

    • SHA512

      6278789de47c18bd9565eceb743e788608cbca9bb03b652e356684898737b7025f9572312be7175e9f9ccdd448b4a498232c32a74002b25d0c83a82eb1b82f0c

    • SSDEEP

      1536:y/XL8/csjgrmSz4GNy53AW+NLa9KXFMFYRAHQsePL3nP2KEfX2jX2LZyhI:yoBgakNO3gs9KXFhety3uKIX2jX2L/

    Score
    6/10
    bootkitpersistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks