General

  • Target

    044b62e3c7874c9782d64bd5ebf1fa5a_JaffaCakes118

  • Size

    31KB

  • Sample

    240622-21q49syerd

  • MD5

    044b62e3c7874c9782d64bd5ebf1fa5a

  • SHA1

    ff6d9c6b52784b8903704b585e99af72d745483e

  • SHA256

    05ddb498b11478a0e759acb2556e87cde42bd362de6ca3501cb864c514e295bf

  • SHA512

    5e4a12db65112433f9cc0b7b0f25c50932b87adf012cce24c8ec9e1d6b40f034e4b44b0ebad05790188abb906f15793023d16e337ab0eca6b2608018868f7ea8

  • SSDEEP

    768:m4/2qcOCm7hDiAjsEcjgtzZP2cKd7owXekGWGrPCgNU:m4/JHR7hfjsEcgtzZucKdUTJWGrPCgNU

Malware Config

Targets

    • Target

      044b62e3c7874c9782d64bd5ebf1fa5a_JaffaCakes118

    • Size

      31KB

    • MD5

      044b62e3c7874c9782d64bd5ebf1fa5a

    • SHA1

      ff6d9c6b52784b8903704b585e99af72d745483e

    • SHA256

      05ddb498b11478a0e759acb2556e87cde42bd362de6ca3501cb864c514e295bf

    • SHA512

      5e4a12db65112433f9cc0b7b0f25c50932b87adf012cce24c8ec9e1d6b40f034e4b44b0ebad05790188abb906f15793023d16e337ab0eca6b2608018868f7ea8

    • SSDEEP

      768:m4/2qcOCm7hDiAjsEcjgtzZP2cKd7owXekGWGrPCgNU:m4/JHR7hfjsEcgtzZucKdUTJWGrPCgNU

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks