Overview

overview

6

Static

static

3

4a8a021266...18.dll

windows7-x64

6

4a8a021266...18.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    4a8a021266f5052235048df6ec420a43_JaffaCakes118

  • Size

    116KB

  • Sample

    240715-t983fasgjg

  • MD5

    4a8a021266f5052235048df6ec420a43

  • SHA1

    cfa0fc3f2a0d9e262e928c3af1df92b5e7012703

  • SHA256

    85089e489352644412c41b633de5670e395df84716dc0600f2582452abadb046

  • SHA512

    a62673818e49ae7d766fecc1f7148f5fc13aabf6c8dee38cc83f024f58561efd8266721faf7a83503afe931da0d14005e8e85496c627191dabf8c37829cadcb7

  • SSDEEP

    3072:166PkviVsAr8nr08W7x3QN8icL3Cx3i00B:QeQiqAYJW7J333i3i5

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      4a8a021266f5052235048df6ec420a43_JaffaCakes118

    • Size

      116KB

    • MD5

      4a8a021266f5052235048df6ec420a43

    • SHA1

      cfa0fc3f2a0d9e262e928c3af1df92b5e7012703

    • SHA256

      85089e489352644412c41b633de5670e395df84716dc0600f2582452abadb046

    • SHA512

      a62673818e49ae7d766fecc1f7148f5fc13aabf6c8dee38cc83f024f58561efd8266721faf7a83503afe931da0d14005e8e85496c627191dabf8c37829cadcb7

    • SSDEEP

      3072:166PkviVsAr8nr08W7x3QN8icL3Cx3i00B:QeQiqAYJW7J333i3i5

    Score
    6/10
    bootkitdiscoverypersistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks