General

  • Target

    07666a3321d43f2aa00ea7d68a0c0e09_JaffaCakes118

  • Size

    120KB

  • Sample

    240620-s5fpnavfmg

  • MD5

    07666a3321d43f2aa00ea7d68a0c0e09

  • SHA1

    58656f5e965c1c921e8929cac2c2cc33a1c04a34

  • SHA256

    4fb2942597e7dc15e38098ddccc5be4a6e1b098114d5ac23733d48d556be1cbc

  • SHA512

    d9eee0c46a1e3a36827b82a52f717d6b3217e5cf1c6af78bae1467d9ba7c063ff88e69c0df0409093ab19d45ce179dd237aafb7552d6758530cb6295cbc1ce07

  • SSDEEP

    3072:oMWlS0ANdF9EyfCBvoVRrkO/PuVKftPW:zvNP9Nrk8RFP

Malware Config

Targets

    • Target

      07666a3321d43f2aa00ea7d68a0c0e09_JaffaCakes118

    • Size

      120KB

    • MD5

      07666a3321d43f2aa00ea7d68a0c0e09

    • SHA1

      58656f5e965c1c921e8929cac2c2cc33a1c04a34

    • SHA256

      4fb2942597e7dc15e38098ddccc5be4a6e1b098114d5ac23733d48d556be1cbc

    • SHA512

      d9eee0c46a1e3a36827b82a52f717d6b3217e5cf1c6af78bae1467d9ba7c063ff88e69c0df0409093ab19d45ce179dd237aafb7552d6758530cb6295cbc1ce07

    • SSDEEP

      3072:oMWlS0ANdF9EyfCBvoVRrkO/PuVKftPW:zvNP9Nrk8RFP

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks