Overview

overview

6

Static

static

3

47b581a6d1...18.exe

windows7-x64

6

47b581a6d1...18.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    47b581a6d19d4f6ea62f84cce7b44d07_JaffaCakes118

  • Size

    214KB

  • Sample

    240715-b7fzrsvdqg

  • MD5

    47b581a6d19d4f6ea62f84cce7b44d07

  • SHA1

    36a7d5441eb1490d28c907e36967f7e226ecda92

  • SHA256

    b15b558ce9dcca3991cad239c9a75fd86262f88eddd0828aa58686d1848f1d4d

  • SHA512

    1e92d6a3aaa262fdea3180508132d184df52e7cdab7f07222ce06eeab7e7ed5d43e73d95752ad0aaf183ee092de0cd4a2a1ad9e96087989d43cc0979b1fea376

  • SSDEEP

    3072:h6tEB96HM0XU+aDe5UEGJSKz7ccRJMM3Ojl5Mq5w7JPtPAu4xJd09910oERRdzOb:huCn+aCyIK3ccnMxjssTxr010hSf0G

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      47b581a6d19d4f6ea62f84cce7b44d07_JaffaCakes118

    • Size

      214KB

    • MD5

      47b581a6d19d4f6ea62f84cce7b44d07

    • SHA1

      36a7d5441eb1490d28c907e36967f7e226ecda92

    • SHA256

      b15b558ce9dcca3991cad239c9a75fd86262f88eddd0828aa58686d1848f1d4d

    • SHA512

      1e92d6a3aaa262fdea3180508132d184df52e7cdab7f07222ce06eeab7e7ed5d43e73d95752ad0aaf183ee092de0cd4a2a1ad9e96087989d43cc0979b1fea376

    • SSDEEP

      3072:h6tEB96HM0XU+aDe5UEGJSKz7ccRJMM3Ojl5Mq5w7JPtPAu4xJd09910oERRdzOb:huCn+aCyIK3ccnMxjssTxr010hSf0G

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks