Overview

overview

7

Static

static

7

430ce8f5bc...18.exe

windows7-x64

7

430ce8f5bc...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    430ce8f5bc90f87f4b092abac4564356_JaffaCakes118

  • Size

    236KB

  • Sample

    240713-x92j5svajj

  • MD5

    430ce8f5bc90f87f4b092abac4564356

  • SHA1

    afcdfd1db1d5338472b9ac9e6147210ab437cf66

  • SHA256

    6d239b852c9d13ba848913d512a49aebc76053086365aea7f0df601b7c1e985d

  • SHA512

    8fd27c03c98af438abc1fc4dc65489a6f4d05690a94459f3c8b6230d514fed825f566436abd3e3aecb09c9f9b9ccc2a6d65559b9cb8e488bfcccfd9eef0b73f3

  • SSDEEP

    6144:203XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBLrli1f8c1t2hwL:2c1udnLSg03ymK2Ilm1F4a4kFrlgf8cf

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      430ce8f5bc90f87f4b092abac4564356_JaffaCakes118

    • Size

      236KB

    • MD5

      430ce8f5bc90f87f4b092abac4564356

    • SHA1

      afcdfd1db1d5338472b9ac9e6147210ab437cf66

    • SHA256

      6d239b852c9d13ba848913d512a49aebc76053086365aea7f0df601b7c1e985d

    • SHA512

      8fd27c03c98af438abc1fc4dc65489a6f4d05690a94459f3c8b6230d514fed825f566436abd3e3aecb09c9f9b9ccc2a6d65559b9cb8e488bfcccfd9eef0b73f3

    • SSDEEP

      6144:203XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBLrli1f8c1t2hwL:2c1udnLSg03ymK2Ilm1F4a4kFrlgf8cf

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks