Overview

overview

7

Static

static

3

3d08c5d942...18.exe

windows7-x64

7

3d08c5d942...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3d08c5d942594c940df559e3f9ecd311_JaffaCakes118

  • Size

    421KB

  • Sample

    240712-mptnpazdmr

  • MD5

    3d08c5d942594c940df559e3f9ecd311

  • SHA1

    f2ab721b8efaba03d0b2b86051758a3b6a17e4d0

  • SHA256

    c7cb803ef1bb01e9f732f7259be510aa5c3f22e9240ebfc16a0b318bf9f3294f

  • SHA512

    f191a1896203e073e40bbb6cf2b9d52ca24bb07304e9247cb7116bf2aa0b94e60b3f89da3f6853a60b1bafb0fa5657f71d821b66859f9cbee2fe13304fdcc895

  • SSDEEP

    12288:Nya7RWFX6iwpBDuyllw6c4PLfC41rvd1bX+gNtTirdQ:wa8FX7wpVuylhKOfu4TEdQ

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      3d08c5d942594c940df559e3f9ecd311_JaffaCakes118

    • Size

      421KB

    • MD5

      3d08c5d942594c940df559e3f9ecd311

    • SHA1

      f2ab721b8efaba03d0b2b86051758a3b6a17e4d0

    • SHA256

      c7cb803ef1bb01e9f732f7259be510aa5c3f22e9240ebfc16a0b318bf9f3294f

    • SHA512

      f191a1896203e073e40bbb6cf2b9d52ca24bb07304e9247cb7116bf2aa0b94e60b3f89da3f6853a60b1bafb0fa5657f71d821b66859f9cbee2fe13304fdcc895

    • SSDEEP

      12288:Nya7RWFX6iwpBDuyllw6c4PLfC41rvd1bX+gNtTirdQ:wa8FX7wpVuylhKOfu4TEdQ

    Score
    7/10
    bootkitpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks