General

  • Target

    0431535748f1020e854a8db46f0b1772_JaffaCakes118

  • Size

    82KB

  • Sample

    240622-2kxxwasajq

  • MD5

    0431535748f1020e854a8db46f0b1772

  • SHA1

    630899020d118bc942b5a220a10a2dbbe5222c19

  • SHA256

    75d3251a1b34a0fad16f1be90402eea3ec2b094b1528a3a6001a45368dad5c1f

  • SHA512

    99fc8557d12c9b116d648f33677c834ea1548638c9bab395bf8716c4065dcd02c9ec0829563ae166d5c377a01d790f64f335d208e6db2d446839e1ad84ab498c

  • SSDEEP

    1536:jPVkgkSPr8eaczJx4YbSs9w2gX384G6RyKtM/M:jNkgxIczv4gSsuvMHzk

Malware Config

Targets

    • Target

      0431535748f1020e854a8db46f0b1772_JaffaCakes118

    • Size

      82KB

    • MD5

      0431535748f1020e854a8db46f0b1772

    • SHA1

      630899020d118bc942b5a220a10a2dbbe5222c19

    • SHA256

      75d3251a1b34a0fad16f1be90402eea3ec2b094b1528a3a6001a45368dad5c1f

    • SHA512

      99fc8557d12c9b116d648f33677c834ea1548638c9bab395bf8716c4065dcd02c9ec0829563ae166d5c377a01d790f64f335d208e6db2d446839e1ad84ab498c

    • SSDEEP

      1536:jPVkgkSPr8eaczJx4YbSs9w2gX384G6RyKtM/M:jNkgxIczv4gSsuvMHzk

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks