5952754af31097a8c7a4599fb993db15867ff5c917cad2cfcf57f2d15635e9cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4856ff527bbb0ace49e3e4ba669c0e92_JaffaCakes118
Size

471KB
Sample

240715-fqxcmsyhkj
MD5

4856ff527bbb0ace49e3e4ba669c0e92
SHA1

203e0c780b592ffe9f82b2a4c7f36f66f54a0c36
SHA256

5952754af31097a8c7a4599fb993db15867ff5c917cad2cfcf57f2d15635e9cd
SHA512

ca71f3d3b86a1e62b0533b3165f6bb9193e4e2810b287b68ad150cc5cff2f550268ca53a4af7a8e36c9df6910d903405829fba77e662ec8504528f34585ed529
SSDEEP

6144:8EUjNj15yCHauqo+Rm+R6+Tp46Nx98gWNlPTGQQm6agrdRA9t+Tm4rBfL1RCaSCR:8lhj/yC6pfRlptaNtTirdG9t+Tt1R3/J

Score

6^/10

bootkit persistence

Malware Config

Targets

- Target
  
  4856ff527bbb0ace49e3e4ba669c0e92_JaffaCakes118
- Size
  
  471KB
- MD5
  
  4856ff527bbb0ace49e3e4ba669c0e92
- SHA1
  
  203e0c780b592ffe9f82b2a4c7f36f66f54a0c36
- SHA256
  
  5952754af31097a8c7a4599fb993db15867ff5c917cad2cfcf57f2d15635e9cd
- SHA512
  
  ca71f3d3b86a1e62b0533b3165f6bb9193e4e2810b287b68ad150cc5cff2f550268ca53a4af7a8e36c9df6910d903405829fba77e662ec8504528f34585ed529
- SSDEEP
  
  6144:8EUjNj15yCHauqo+Rm+R6+Tp46Nx98gWNlPTGQQm6agrdRA9t+Tm4rBfL1RCaSCR:8lhj/yC6pfRlptaNtTirdG9t+Tt1R3/J
Score

6^/10

bootkit persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2