Overview

overview

7

Static

static

3

44847dd56e...18.exe

windows7-x64

7

44847dd56e...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    44847dd56e3f0b12cded2ed119e71b08_JaffaCakes118

  • Size

    465KB

  • Sample

    240714-f9228s1blg

  • MD5

    44847dd56e3f0b12cded2ed119e71b08

  • SHA1

    a1e6083e119112247a3daa657391b819688f5b5b

  • SHA256

    97bcd18db714a324db6c0924a38e886073ab63918b8b296efa76f9507023d91a

  • SHA512

    afb94017fa6683928811ea89dec0ac2cea485701d57b4da834f3ae7fbaae1e8454675b685342d16d4ecf0d4170aaf97290625c32f4dc69275b7ba5cd29b6cc78

  • SSDEEP

    12288:jM4Ohairf5s80L5cZRJLNXzM6oLFIED8wqDAvGeciA15sn:jM42rfEcLJhzM68RqIfciwOn

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      44847dd56e3f0b12cded2ed119e71b08_JaffaCakes118

    • Size

      465KB

    • MD5

      44847dd56e3f0b12cded2ed119e71b08

    • SHA1

      a1e6083e119112247a3daa657391b819688f5b5b

    • SHA256

      97bcd18db714a324db6c0924a38e886073ab63918b8b296efa76f9507023d91a

    • SHA512

      afb94017fa6683928811ea89dec0ac2cea485701d57b4da834f3ae7fbaae1e8454675b685342d16d4ecf0d4170aaf97290625c32f4dc69275b7ba5cd29b6cc78

    • SSDEEP

      12288:jM4Ohairf5s80L5cZRJLNXzM6oLFIED8wqDAvGeciA15sn:jM42rfEcLJhzM68RqIfciwOn

    Score
    7/10
    bootkitpersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks