Overview

overview

7

Static

static

3

2db04cc0d1...18.exe

windows7-x64

6

2db04cc0d1...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2db04cc0d1a12b155c22dae759ea9f7e_JaffaCakes118

  • Size

    262KB

  • Sample

    240708-y7eg9sxbqq

  • MD5

    2db04cc0d1a12b155c22dae759ea9f7e

  • SHA1

    2f1cafc7d0f3b0a7dc952d7b7c49456983266895

  • SHA256

    29efa53e63eb8e6b65598c4458acc193e92162da72ab55000c51b48da5f1249f

  • SHA512

    7ff100268a288be3dd3d67b014dc288971d7f5b03b57911c15efd48aa6f3511128de07baa405255051b0280e21b03d2beae38727369ee4d321be578426d19c43

  • SSDEEP

    6144:Hw0Vt5pW8yU8ZrzPzDy77VeO32XOy8daPSJ9:HDW88pfU7t3Vy3PSJ9

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      2db04cc0d1a12b155c22dae759ea9f7e_JaffaCakes118

    • Size

      262KB

    • MD5

      2db04cc0d1a12b155c22dae759ea9f7e

    • SHA1

      2f1cafc7d0f3b0a7dc952d7b7c49456983266895

    • SHA256

      29efa53e63eb8e6b65598c4458acc193e92162da72ab55000c51b48da5f1249f

    • SHA512

      7ff100268a288be3dd3d67b014dc288971d7f5b03b57911c15efd48aa6f3511128de07baa405255051b0280e21b03d2beae38727369ee4d321be578426d19c43

    • SSDEEP

      6144:Hw0Vt5pW8yU8ZrzPzDy77VeO32XOy8daPSJ9:HDW88pfU7t3Vy3PSJ9

    Score
    7/10
    bootkitpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks