Overview

overview

6

Static

static

3

291e50ea84...18.dll

windows7-x64

6

291e50ea84...18.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    291e50ea8487be8d85aa00721dba8382_JaffaCakes118

  • Size

    124KB

  • Sample

    240706-wqdtasyamn

  • MD5

    291e50ea8487be8d85aa00721dba8382

  • SHA1

    3ba6d3fb18076c3b903c602dc67bc2f2071a57cb

  • SHA256

    714473f11f889e3613eb0f3faf3de618efc5229ab53e18b58fbc912069acc3bb

  • SHA512

    11fb90d37fe1ac77b656ea3f4aeacdbe138c60e3d912214ca2bb94506cfe084ddfe74f20a666e972fa2404cc9558e70aea2b62dc58bde81420a33ba217b7c7a8

  • SSDEEP

    3072:ICf84NZCM7EmF070rpdkcI4RFr+8mgOsrofwiqP:Ie84zCM7jF0ugoy8mjsro5q

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      291e50ea8487be8d85aa00721dba8382_JaffaCakes118

    • Size

      124KB

    • MD5

      291e50ea8487be8d85aa00721dba8382

    • SHA1

      3ba6d3fb18076c3b903c602dc67bc2f2071a57cb

    • SHA256

      714473f11f889e3613eb0f3faf3de618efc5229ab53e18b58fbc912069acc3bb

    • SHA512

      11fb90d37fe1ac77b656ea3f4aeacdbe138c60e3d912214ca2bb94506cfe084ddfe74f20a666e972fa2404cc9558e70aea2b62dc58bde81420a33ba217b7c7a8

    • SSDEEP

      3072:ICf84NZCM7EmF070rpdkcI4RFr+8mgOsrofwiqP:Ie84zCM7jF0ugoy8mjsro5q

    Score
    6/10
    bootkitdiscoverypersistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks