Overview

overview

7

Static

static

7

3f5686953b...18.exe

windows7-x64

7

3f5686953b...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3f5686953b763e1d8d3149a070d5b8d5_JaffaCakes118

  • Size

    245KB

  • Sample

    240712-3qb32awcmk

  • MD5

    3f5686953b763e1d8d3149a070d5b8d5

  • SHA1

    4bf2352a3c323368953fa24ac2afcc131d0d7d56

  • SHA256

    edde7fa4959e9bba8d1e88861000af86602da8f3ebf4fbb2d0b6ae722c6fd52b

  • SHA512

    e59594de6eb504d539e492caba53fe82e24f5fe2c04e5cb40b3370a7fbf3b7b4c86ea25d06f8fa39c992707b705078b7724b804df83ce0b083138bff867055c6

  • SSDEEP

    6144:ibWnr0/kbPD9aJwU1/SeKX8hc3Z5yBSfnrPf:iCvbmwg/SVEcrNfnrPf

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      3f5686953b763e1d8d3149a070d5b8d5_JaffaCakes118

    • Size

      245KB

    • MD5

      3f5686953b763e1d8d3149a070d5b8d5

    • SHA1

      4bf2352a3c323368953fa24ac2afcc131d0d7d56

    • SHA256

      edde7fa4959e9bba8d1e88861000af86602da8f3ebf4fbb2d0b6ae722c6fd52b

    • SHA512

      e59594de6eb504d539e492caba53fe82e24f5fe2c04e5cb40b3370a7fbf3b7b4c86ea25d06f8fa39c992707b705078b7724b804df83ce0b083138bff867055c6

    • SSDEEP

      6144:ibWnr0/kbPD9aJwU1/SeKX8hc3Z5yBSfnrPf:iCvbmwg/SVEcrNfnrPf

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks