Overview

overview

7

Static

static

3

48a74ba0a5...18.exe

windows7-x64

7

48a74ba0a5...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    48a74ba0a5c196918627d6a1ca364ab5_JaffaCakes118

  • Size

    312KB

  • Sample

    240715-hglkwswcmh

  • MD5

    48a74ba0a5c196918627d6a1ca364ab5

  • SHA1

    b521f4be60b7f507a522c2a2dba6eac17e3488ae

  • SHA256

    87f3de141b60a7839d9ede35efb07b09e46cf237703675c3b897f1b708517b7c

  • SHA512

    8e2754e7c43a37231dfdc67f5e56b93e56d2e36e4322e62133e4d0ff52f7005dee1fb9c6c8245bfab2fcba9888b02d78cb4dd4d26533f820844c8c17ee9c9cde

  • SSDEEP

    6144:XIu9ZR9UPiB9ZgqJQ9DtqZqXHEcUV0rWP+6OEhSgx:fZ/1o9UEX40rv6Ovgx

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      48a74ba0a5c196918627d6a1ca364ab5_JaffaCakes118

    • Size

      312KB

    • MD5

      48a74ba0a5c196918627d6a1ca364ab5

    • SHA1

      b521f4be60b7f507a522c2a2dba6eac17e3488ae

    • SHA256

      87f3de141b60a7839d9ede35efb07b09e46cf237703675c3b897f1b708517b7c

    • SHA512

      8e2754e7c43a37231dfdc67f5e56b93e56d2e36e4322e62133e4d0ff52f7005dee1fb9c6c8245bfab2fcba9888b02d78cb4dd4d26533f820844c8c17ee9c9cde

    • SSDEEP

      6144:XIu9ZR9UPiB9ZgqJQ9DtqZqXHEcUV0rWP+6OEhSgx:fZ/1o9UEX40rv6Ovgx

    Score
    7/10
    bootkitpersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks