Overview

overview

7

Static

static

7

17531f25cf...18.exe

windows7-x64

17531f25cf...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17531f25cfacf2d072048f555e19b111_JaffaCakes118

  • Size

    31KB

  • Sample

    240627-ynwmfaxfpc

  • MD5

    17531f25cfacf2d072048f555e19b111

  • SHA1

    de32e6bf5efcadd783a242d751c610266d1c366a

  • SHA256

    e7975e4dce0f8070e0e99492d4bdd8e89b406ae48a36728daa1592b394cdfcbf

  • SHA512

    84fd41ec6c1eda50e0cc7e2496b5652afc121a757bada8507564c5b821ede72456071841bc8e8f763848be9d459df00a333f452f92a8038286924be2e686895d

  • SSDEEP

    768:iglI5snqq2fIk8Z2I90NQ66bfQgkKXwR:di5/7I90q6sEowR

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      17531f25cfacf2d072048f555e19b111_JaffaCakes118

    • Size

      31KB

    • MD5

      17531f25cfacf2d072048f555e19b111

    • SHA1

      de32e6bf5efcadd783a242d751c610266d1c366a

    • SHA256

      e7975e4dce0f8070e0e99492d4bdd8e89b406ae48a36728daa1592b394cdfcbf

    • SHA512

      84fd41ec6c1eda50e0cc7e2496b5652afc121a757bada8507564c5b821ede72456071841bc8e8f763848be9d459df00a333f452f92a8038286924be2e686895d

    • SSDEEP

      768:iglI5snqq2fIk8Z2I90NQ66bfQgkKXwR:di5/7I90q6sEowR

    Score
    7/10
    bootkitpersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks