Overview

overview

7

Static

static

1

65782a8940...18.exe

windows7-x64

6

65782a8940...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65782a89407957a1b75f289b2686eeca_JaffaCakes118

  • Size

    7.0MB

  • Sample

    240522-bh97bafg2z

  • MD5

    65782a89407957a1b75f289b2686eeca

  • SHA1

    450cff946ada1c2faecff2022e2bf8d252ce256e

  • SHA256

    aaedaa050d4c36bbde17f64881abf8e1d262c8d7ec4ac1a242cfef4c0d6ffcbc

  • SHA512

    c9ccea0d441bbbf643bee0a6dc61fe4946e1b0989d43c3461ec0d001fcf38030dd115ffe25a4b030bd7b73d2e011264c2f058a1bceecb3dcaf72c0dadbdf6cf6

  • SSDEEP

    196608:3tyoNtGUevnh36ujLM28KUhvYBPEVY0LSX6QXb:3tZVeTLJQYRP6QL

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      65782a89407957a1b75f289b2686eeca_JaffaCakes118

    • Size

      7.0MB

    • MD5

      65782a89407957a1b75f289b2686eeca

    • SHA1

      450cff946ada1c2faecff2022e2bf8d252ce256e

    • SHA256

      aaedaa050d4c36bbde17f64881abf8e1d262c8d7ec4ac1a242cfef4c0d6ffcbc

    • SHA512

      c9ccea0d441bbbf643bee0a6dc61fe4946e1b0989d43c3461ec0d001fcf38030dd115ffe25a4b030bd7b73d2e011264c2f058a1bceecb3dcaf72c0dadbdf6cf6

    • SSDEEP

      196608:3tyoNtGUevnh36ujLM28KUhvYBPEVY0LSX6QXb:3tZVeTLJQYRP6QL

    Score
    7/10
    bootkitpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks