Overview

overview

7

Static

static

7

3939cda5ba...18.exe

windows7-x64

7

3939cda5ba...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3939cda5baad50f26308ce0981dbaf06_JaffaCakes118

  • Size

    241KB

  • Sample

    240711-p92adaxdjn

  • MD5

    3939cda5baad50f26308ce0981dbaf06

  • SHA1

    069d80ba1ce9dd8c9af8bd8faaaab3c88728ffea

  • SHA256

    3f4e1b78931cd97545aca9dc632a265af03c2c798d936a2b15f3c5e2bea9408b

  • SHA512

    e2fb5a628def68b5535a76db24f6f78e488d49a85486a9d96c48dd8b9383f297800cce269e19dfa6097fcd3410ea4929672566c9d4650d406066a20efaff2561

  • SSDEEP

    6144:okeENDvTSn2SV/GuhYdViC7X57+nMp7B4WLm2u:oNEND/k/GLPX57+nE7zm2u

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      3939cda5baad50f26308ce0981dbaf06_JaffaCakes118

    • Size

      241KB

    • MD5

      3939cda5baad50f26308ce0981dbaf06

    • SHA1

      069d80ba1ce9dd8c9af8bd8faaaab3c88728ffea

    • SHA256

      3f4e1b78931cd97545aca9dc632a265af03c2c798d936a2b15f3c5e2bea9408b

    • SHA512

      e2fb5a628def68b5535a76db24f6f78e488d49a85486a9d96c48dd8b9383f297800cce269e19dfa6097fcd3410ea4929672566c9d4650d406066a20efaff2561

    • SSDEEP

      6144:okeENDvTSn2SV/GuhYdViC7X57+nMp7B4WLm2u:oNEND/k/GLPX57+nE7zm2u

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks