Overview

overview

7

Static

static

7

4078e76976...18.exe

windows7-x64

7

4078e76976...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4078e7697632b7730b3772c9562fc2cd_JaffaCakes118

  • Size

    236KB

  • Sample

    240713-gs8dcsyeml

  • MD5

    4078e7697632b7730b3772c9562fc2cd

  • SHA1

    3c4c98e0571792e20efbeb46cab9ce69981612e6

  • SHA256

    75e20e73bba9623140ef8c6c90f4b5e15a6a9c9bfd1977c47a0104b18f69fd84

  • SHA512

    3672907b1b0a440fa8a81508b76d1fc84686e8b7d7c93be7ae44930fc0f2c35f261e61ac01b8bdf527db7f0775bc11c6ff3ecb10dbb0de0212517e3eadf7f8fd

  • SSDEEP

    6144:803XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBGcnTTTRXJD0:8c1udnLSg03ymK2Ilm1F4a4kocTXRXZ0

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      4078e7697632b7730b3772c9562fc2cd_JaffaCakes118

    • Size

      236KB

    • MD5

      4078e7697632b7730b3772c9562fc2cd

    • SHA1

      3c4c98e0571792e20efbeb46cab9ce69981612e6

    • SHA256

      75e20e73bba9623140ef8c6c90f4b5e15a6a9c9bfd1977c47a0104b18f69fd84

    • SHA512

      3672907b1b0a440fa8a81508b76d1fc84686e8b7d7c93be7ae44930fc0f2c35f261e61ac01b8bdf527db7f0775bc11c6ff3ecb10dbb0de0212517e3eadf7f8fd

    • SSDEEP

      6144:803XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBGcnTTTRXJD0:8c1udnLSg03ymK2Ilm1F4a4kocTXRXZ0

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks