Overview

overview

6

Static

static

3

347f3b4cf9...18.exe

windows7-x64

6

347f3b4cf9...18.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    347f3b4cf962d271f179a0bf807fcc54_JaffaCakes118

  • Size

    336KB

  • Sample

    240710-neacqswhmb

  • MD5

    347f3b4cf962d271f179a0bf807fcc54

  • SHA1

    1a16e59762edaae2c6837e232cb96bc0adbd3500

  • SHA256

    d6eca5cc4226e83ba342c5e4c57f5b6905c0da5e95f4d1acbb1cbd316a8ebd72

  • SHA512

    bbd238b5616b6d3843d58ede1cc49081be6c03d89d3ba1f1232fc8f2a50aebb790182e29b04dec60d5136d94d19ed2bf594d2f1033e4500ffecc632b3cb42a89

  • SSDEEP

    6144:OvF2EBU/MyHKu94Gz5J6tXCgWGYkSPT2c+um150J1/PflcCIt64+MZQWet:O80yHZXeXSic+um5S1XCCIt64+EQWet

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      347f3b4cf962d271f179a0bf807fcc54_JaffaCakes118

    • Size

      336KB

    • MD5

      347f3b4cf962d271f179a0bf807fcc54

    • SHA1

      1a16e59762edaae2c6837e232cb96bc0adbd3500

    • SHA256

      d6eca5cc4226e83ba342c5e4c57f5b6905c0da5e95f4d1acbb1cbd316a8ebd72

    • SHA512

      bbd238b5616b6d3843d58ede1cc49081be6c03d89d3ba1f1232fc8f2a50aebb790182e29b04dec60d5136d94d19ed2bf594d2f1033e4500ffecc632b3cb42a89

    • SSDEEP

      6144:OvF2EBU/MyHKu94Gz5J6tXCgWGYkSPT2c+um150J1/PflcCIt64+MZQWet:O80yHZXeXSic+um5S1XCCIt64+EQWet

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks