Overview

overview

7

Static

static

7

193916f5c9...18.exe

windows7-x64

7

193916f5c9...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    193916f5c9269bc0fa6541f48bff6f4a_JaffaCakes118

  • Size

    202KB

  • Sample

    240628-hxb2dsxapb

  • MD5

    193916f5c9269bc0fa6541f48bff6f4a

  • SHA1

    b0f207d7fa175013d67a1ff708859a25579c170a

  • SHA256

    1c0838f4ef5d1a0aae88e6bc3004d6dd17d0744de983a495bece124a2649ceea

  • SHA512

    455bcf167323f80fc176cc6ce10b54dddd2571934e6dadb754686ba50e0d5cb7100e19353d7968cf2dbc4b11ed46bec5d9aed910a52235d5f60602374850f525

  • SSDEEP

    3072:XvnwfV24Ih/EiGBoToXrnrU34tC4qVN7zaD4UVvr5Ip5p1kHQSxAm:A24Ih/VIzD4rJH5UlrWZ2H7R

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      193916f5c9269bc0fa6541f48bff6f4a_JaffaCakes118

    • Size

      202KB

    • MD5

      193916f5c9269bc0fa6541f48bff6f4a

    • SHA1

      b0f207d7fa175013d67a1ff708859a25579c170a

    • SHA256

      1c0838f4ef5d1a0aae88e6bc3004d6dd17d0744de983a495bece124a2649ceea

    • SHA512

      455bcf167323f80fc176cc6ce10b54dddd2571934e6dadb754686ba50e0d5cb7100e19353d7968cf2dbc4b11ed46bec5d9aed910a52235d5f60602374850f525

    • SSDEEP

      3072:XvnwfV24Ih/EiGBoToXrnrU34tC4qVN7zaD4UVvr5Ip5p1kHQSxAm:A24Ih/VIzD4rJH5UlrWZ2H7R

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks