71c7f9d75b9a209628a3fb40612e4848241b3d8ca0a6b654546d868af3a5f8a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

491acae68ba143a511f534dcea23a231_JaffaCakes118
Size

453KB
Sample

240715-kyhlns1ere
MD5

491acae68ba143a511f534dcea23a231
SHA1

dbae49a2d2988f88b94ca9cbb732801f36267151
SHA256

71c7f9d75b9a209628a3fb40612e4848241b3d8ca0a6b654546d868af3a5f8a0
SHA512

e89b709efa36b346b260612b4d9484675f18dfdf451a909387469f5c627d0f6ccc4187b7f57216fca9da101625f1590519088f9147576ff62b6f912cb7dfc06e
SSDEEP

12288:p0X14Q9u82sMCk8lBa1Ty/V9MIe1S6b7MP+Dd21b2a:pg14QU8GCyTyt9MIeR7MP+h21Ka

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  491acae68ba143a511f534dcea23a231_JaffaCakes118
- Size
  
  453KB
- MD5
  
  491acae68ba143a511f534dcea23a231
- SHA1
  
  dbae49a2d2988f88b94ca9cbb732801f36267151
- SHA256
  
  71c7f9d75b9a209628a3fb40612e4848241b3d8ca0a6b654546d868af3a5f8a0
- SHA512
  
  e89b709efa36b346b260612b4d9484675f18dfdf451a909387469f5c627d0f6ccc4187b7f57216fca9da101625f1590519088f9147576ff62b6f912cb7dfc06e
- SSDEEP
  
  12288:p0X14Q9u82sMCk8lBa1Ty/V9MIe1S6b7MP+Dd21b2a:pg14QU8GCyTyt9MIeR7MP+h21Ka
Score

7^/10

bootkit persistence
- Executes dropped EXE
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2