Overview

overview

7

Static

static

7

45c2f39aa4...18.exe

windows7-x64

6

45c2f39aa4...18.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    45c2f39aa4bb5b88dfa997e55a6f4dd7_JaffaCakes118

  • Size

    290KB

  • Sample

    240714-pdcxxascqd

  • MD5

    45c2f39aa4bb5b88dfa997e55a6f4dd7

  • SHA1

    713d71ca9a99b9e14fdc31527dd03151deb0a3ab

  • SHA256

    b93fe2d061d574e64e459814ad0b689a9ca2549325dc2c4e125823dd2922fda5

  • SHA512

    1523bd72b71a536a5d9d31fd7f3dbc4fd9ebbc2724b0278b6ec11034fbffc664e1cc7cfa6dc0cb40678cad42203579622fea3a89bf2c7e99c53184ce4d68c79f

  • SSDEEP

    6144:MVDIykF3mQt0fZv9YC5fn+aCyIK3ccnMxj6YClOa:MhedmUWY2W1K3DnsZCc

Score
7/10
aspackv2bootkitpersistence

Malware Config

Targets

    • Target

      45c2f39aa4bb5b88dfa997e55a6f4dd7_JaffaCakes118

    • Size

      290KB

    • MD5

      45c2f39aa4bb5b88dfa997e55a6f4dd7

    • SHA1

      713d71ca9a99b9e14fdc31527dd03151deb0a3ab

    • SHA256

      b93fe2d061d574e64e459814ad0b689a9ca2549325dc2c4e125823dd2922fda5

    • SHA512

      1523bd72b71a536a5d9d31fd7f3dbc4fd9ebbc2724b0278b6ec11034fbffc664e1cc7cfa6dc0cb40678cad42203579622fea3a89bf2c7e99c53184ce4d68c79f

    • SSDEEP

      6144:MVDIykF3mQt0fZv9YC5fn+aCyIK3ccnMxj6YClOa:MhedmUWY2W1K3DnsZCc

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks