General

  • Target

    aae195b37a591464a391e1ed2464db03_JaffaCakes118

  • Size

    2.3MB

  • Sample

    240614-vwmsqazcld

  • MD5

    aae195b37a591464a391e1ed2464db03

  • SHA1

    b1b2841bc064c54438a35e74e2659332a7de9c34

  • SHA256

    eaebf303b4f31df361846ba33d25bb723d6430f82789e7f7c217d44cfc8a6cdb

  • SHA512

    0bdcea892fdb16de01e847bea23bc6784ef6fe2f5ad34a42203fced105362c01cd652695d2a97e4a266df1a21500cd28008c0f80c937ee27e3852f34bf573d4d

  • SSDEEP

    49152:mTEFVxVbtrlYI9xq0oL4nnWKEtStHbPC6SAExuYJ8NGBKCUTjxLdTp4LCF4:hVbtrKI9xFo0nPEWC3VxuYWGMFQZ

Malware Config

Targets

    • Target

      aae195b37a591464a391e1ed2464db03_JaffaCakes118

    • Size

      2.3MB

    • MD5

      aae195b37a591464a391e1ed2464db03

    • SHA1

      b1b2841bc064c54438a35e74e2659332a7de9c34

    • SHA256

      eaebf303b4f31df361846ba33d25bb723d6430f82789e7f7c217d44cfc8a6cdb

    • SHA512

      0bdcea892fdb16de01e847bea23bc6784ef6fe2f5ad34a42203fced105362c01cd652695d2a97e4a266df1a21500cd28008c0f80c937ee27e3852f34bf573d4d

    • SSDEEP

      49152:mTEFVxVbtrlYI9xq0oL4nnWKEtStHbPC6SAExuYJ8NGBKCUTjxLdTp4LCF4:hVbtrKI9xFo0nPEWC3VxuYWGMFQZ

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Discovery

Query Registry

1
T1012

Tasks