Overview

overview

6

Static

static

3

439982d3d9...18.exe

windows7-x64

6

439982d3d9...18.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    439982d3d9be0c5c52b04ff27b4aeaca_JaffaCakes118

  • Size

    589KB

  • Sample

    240713-2ekqcssbre

  • MD5

    439982d3d9be0c5c52b04ff27b4aeaca

  • SHA1

    621d42c4696dacbbd03b632f809dab4752ef4486

  • SHA256

    fc5592cfc085e2a9038dd9dc59136d23b9992d94b296bda21bb2f0a65ac8079c

  • SHA512

    e550c4c8ebd1630438e537365d38e912ecec805725cf0a22fb263c004a9588c8ba9b5a33f2d41c051bcfd4c6043a71e6dcdfe1566b6ee395aef77de161b0014e

  • SSDEEP

    12288:8Yn6nor/xrIkPdq/r5DUKWpslqxBTk+OMn4Wqn60Oht23Lsx4aVzYKj86se6w:agJr9PIDOsl4Bg+OM4viiLsvpYO6w

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      439982d3d9be0c5c52b04ff27b4aeaca_JaffaCakes118

    • Size

      589KB

    • MD5

      439982d3d9be0c5c52b04ff27b4aeaca

    • SHA1

      621d42c4696dacbbd03b632f809dab4752ef4486

    • SHA256

      fc5592cfc085e2a9038dd9dc59136d23b9992d94b296bda21bb2f0a65ac8079c

    • SHA512

      e550c4c8ebd1630438e537365d38e912ecec805725cf0a22fb263c004a9588c8ba9b5a33f2d41c051bcfd4c6043a71e6dcdfe1566b6ee395aef77de161b0014e

    • SSDEEP

      12288:8Yn6nor/xrIkPdq/r5DUKWpslqxBTk+OMn4Wqn60Oht23Lsx4aVzYKj86se6w:agJr9PIDOsl4Bg+OM4viiLsvpYO6w

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks