c7ab3bbb6f3e1fa288b5a991d3d80a8c2affeacb00afb3da3aa4292bb91edfab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

412afc76de09d1339c41d3cec032d53a_JaffaCakes118
Size

20KB
Sample

240713-lsnq6syakd
MD5

412afc76de09d1339c41d3cec032d53a
SHA1

4f7144f54bb89dd719e15ffba5adf98a8bca2010
SHA256

c7ab3bbb6f3e1fa288b5a991d3d80a8c2affeacb00afb3da3aa4292bb91edfab
SHA512

22cff6a58a69f1af99218dca30284ff4ebfb8847334032eef93cb6ac2c7a824fd6f731224240b5b3480f0a7ec86f47bf78d5293cc38f0a89096117d8e6616186
SSDEEP

384:D5tHfvrZ5j7775SdJTf+3HbaC01gECgN5hOEBA38wOGMXdtwktrGpbS:DN5f5SvW3bH01gECgN5hBYjONZrGp2

Score

6^/10

bootkit persistence

Malware Config

Targets

- Target
  
  412afc76de09d1339c41d3cec032d53a_JaffaCakes118
- Size
  
  20KB
- MD5
  
  412afc76de09d1339c41d3cec032d53a
- SHA1
  
  4f7144f54bb89dd719e15ffba5adf98a8bca2010
- SHA256
  
  c7ab3bbb6f3e1fa288b5a991d3d80a8c2affeacb00afb3da3aa4292bb91edfab
- SHA512
  
  22cff6a58a69f1af99218dca30284ff4ebfb8847334032eef93cb6ac2c7a824fd6f731224240b5b3480f0a7ec86f47bf78d5293cc38f0a89096117d8e6616186
- SSDEEP
  
  384:D5tHfvrZ5j7775SdJTf+3HbaC01gECgN5hOEBA38wOGMXdtwktrGpbS:DN5f5SvW3bH01gECgN5hBYjONZrGp2
Score

6^/10

bootkit persistence
- Program crash
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence