Overview

overview

8

Static

static

3

013402c49b...18.exe

windows7-x64

8

013402c49b...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    013402c49beb8bb6a51c2996540b9ca2_JaffaCakes118

  • Size

    23KB

  • Sample

    240619-3l4bqaxblg

  • MD5

    013402c49beb8bb6a51c2996540b9ca2

  • SHA1

    78cb6a0adb3330a2a20d2bc2d8489bd45d3df701

  • SHA256

    bce55a0dc2822a97385c8d800badb4e70e777424b4360801e135a5e5381eb024

  • SHA512

    3047f99d4b4c2e468d352b5a7557e189eed3d5eb37988bd4cae87d25c28b9c6d8e6b296cf14d7ce0aabcc50b9cdd91e744fabd123f5fde25fc3fbc1b5e9b6c38

  • SSDEEP

    384:0TfFImKbnki0v/fP/XkWnsVF1CEaQxaaKNDU1qTmXNIpiOAeAh4A0/WDx:aal8/fHXkWns/1aQUa8DUv9WiOATUWDx

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      013402c49beb8bb6a51c2996540b9ca2_JaffaCakes118

    • Size

      23KB

    • MD5

      013402c49beb8bb6a51c2996540b9ca2

    • SHA1

      78cb6a0adb3330a2a20d2bc2d8489bd45d3df701

    • SHA256

      bce55a0dc2822a97385c8d800badb4e70e777424b4360801e135a5e5381eb024

    • SHA512

      3047f99d4b4c2e468d352b5a7557e189eed3d5eb37988bd4cae87d25c28b9c6d8e6b296cf14d7ce0aabcc50b9cdd91e744fabd123f5fde25fc3fbc1b5e9b6c38

    • SSDEEP

      384:0TfFImKbnki0v/fP/XkWnsVF1CEaQxaaKNDU1qTmXNIpiOAeAh4A0/WDx:aal8/fHXkWns/1aQUa8DUv9WiOATUWDx

    Score
    8/10
    bootkitpersistence

    • Drops file in Drivers directory

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks