Overview

overview

7

Static

static

7

0010c435a8...18.exe

windows7-x64

7

0010c435a8...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0010c435a8f1d24f631fda5039633f2b_JaffaCakes118

  • Size

    462KB

  • Sample

    240619-xnavas1hkp

  • MD5

    0010c435a8f1d24f631fda5039633f2b

  • SHA1

    7c1b24b3dab58417ed710bffc36b6e4a281dfa43

  • SHA256

    285bfaf0ac6267f8c79f234ab28f4d63a9a76c2249ca3e16e89002f8aa2c9a87

  • SHA512

    b2afee85cfc91faf27cf0215f248a464833d6402108b4a7b7277b046a9df194542279626af761c7496c59c84a387cf7048936092ba5b15d5596484f3e22e26c9

  • SSDEEP

    6144:8/ATtfnciTWBu3WCPWi4+nloPxH36qC8C0lR1zlq0Yb+o9qQSP3lnEk:8/It/ciTID4jpoPML0lR15m5tk

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      0010c435a8f1d24f631fda5039633f2b_JaffaCakes118

    • Size

      462KB

    • MD5

      0010c435a8f1d24f631fda5039633f2b

    • SHA1

      7c1b24b3dab58417ed710bffc36b6e4a281dfa43

    • SHA256

      285bfaf0ac6267f8c79f234ab28f4d63a9a76c2249ca3e16e89002f8aa2c9a87

    • SHA512

      b2afee85cfc91faf27cf0215f248a464833d6402108b4a7b7277b046a9df194542279626af761c7496c59c84a387cf7048936092ba5b15d5596484f3e22e26c9

    • SSDEEP

      6144:8/ATtfnciTWBu3WCPWi4+nloPxH36qC8C0lR1zlq0Yb+o9qQSP3lnEk:8/It/ciTID4jpoPML0lR15m5tk

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks