Overview

overview

7

Static

static

7

431e68e80d...18.exe

windows7-x64

7

431e68e80d...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    431e68e80d312d82ae322fded1af8e04_JaffaCakes118

  • Size

    230KB

  • Sample

    240713-ymr8maxcpg

  • MD5

    431e68e80d312d82ae322fded1af8e04

  • SHA1

    ddb8cc1386ae7d069138000d5d575c235997d99d

  • SHA256

    79315d2545211c66baab441cbe68931d8b2cd6b1428c4e8ab5ee53bef4133adc

  • SHA512

    72a10b27ab2317a34ad74062f5a5d99c1023da27627ed3c10127579745891b51ea65a581cb54ba0ff0a538977201ad130d88434524d1aff134c6fbfaaee30353

  • SSDEEP

    6144:203XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncB1he0I15s+:2c1udnLSg03ymK2Ilm1F4a4kY15s+

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      431e68e80d312d82ae322fded1af8e04_JaffaCakes118

    • Size

      230KB

    • MD5

      431e68e80d312d82ae322fded1af8e04

    • SHA1

      ddb8cc1386ae7d069138000d5d575c235997d99d

    • SHA256

      79315d2545211c66baab441cbe68931d8b2cd6b1428c4e8ab5ee53bef4133adc

    • SHA512

      72a10b27ab2317a34ad74062f5a5d99c1023da27627ed3c10127579745891b51ea65a581cb54ba0ff0a538977201ad130d88434524d1aff134c6fbfaaee30353

    • SSDEEP

      6144:203XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncB1he0I15s+:2c1udnLSg03ymK2Ilm1F4a4kY15s+

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks