Overview

overview

7

Static

static

3

PCHome_download.html

windows7-x64

1

PCHome_download.html

windows10-2004-x64

1

lhftpbak/sjbf.exe

windows7-x64

7

lhftpbak/sjbf.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    263cb8bc40b625c631b97036ff42c206_JaffaCakes118
  • Size 1.1MB
  • Sample240508-xh7bbacd72
  • SHA256 932bb249fdaf5f667b5961311848d88bf84c31243d37b468e464db0fa72581a8
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target
      PCHome_download.html
    • Size 784B
    • SHA256 c9389b0370d5af112903f6fe648297068aff32c64bff90d3e0098a753329b08d
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral1behavioral2
    • Target
      lhftpbak/sjbf.exe
    • Size 1.1MB
    • SHA256 c49123abb1671f28168a2f9f2fce3926980a767b7aa407cd6b8718339a7e8826
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    bootkitpersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks