Overview

overview

10

Static

static

3

33330d232d...18.exe

windows7-x64

1

33330d232d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33330d232dc65de6c888f1dd2197b83c_JaffaCakes118

  • Size

    37KB

  • Sample

    240710-eesdwaxarf

  • MD5

    33330d232dc65de6c888f1dd2197b83c

  • SHA1

    69f0c7df68c65d4245620e4e4f63b644981a6966

  • SHA256

    0d26514e4a3dec2b8d692b911f1837d32fd700c9aad23980a8abba6d8b53348d

  • SHA512

    f29fb20b1cd76023b8c0f7a0f9109b2e6992b42c072e26acc96e16edf37c54509b54f5bbe9644f00920f30b1350d46027a13f0374da54c5c91330bada95a09a9

  • SSDEEP

    768:IzCg7g3H4hiPiL1GrDALLlcp/s5w7wtdn5:cCl3HrPihmWLiRsS

Score
10/10
bootkitevasionpersistence

Malware Config

Targets

    • Target

      33330d232dc65de6c888f1dd2197b83c_JaffaCakes118

    • Size

      37KB

    • MD5

      33330d232dc65de6c888f1dd2197b83c

    • SHA1

      69f0c7df68c65d4245620e4e4f63b644981a6966

    • SHA256

      0d26514e4a3dec2b8d692b911f1837d32fd700c9aad23980a8abba6d8b53348d

    • SHA512

      f29fb20b1cd76023b8c0f7a0f9109b2e6992b42c072e26acc96e16edf37c54509b54f5bbe9644f00920f30b1350d46027a13f0374da54c5c91330bada95a09a9

    • SSDEEP

      768:IzCg7g3H4hiPiL1GrDALLlcp/s5w7wtdn5:cCl3HrPihmWLiRsS

    Score
    10/10
    bootkitevasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks