bd46afa3e1f3ea48b2b1e6643dac9487a57f31d493b4fa7e4355a30a35b3868e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c7aafbbf8ad51599b12578b24884c18_JaffaCakes118
Size

122KB
Sample

240716-c77m6a1fmq
MD5

4c7aafbbf8ad51599b12578b24884c18
SHA1

ca31f53d3df710f1e5e01c1a70572d86702fbb13
SHA256

bd46afa3e1f3ea48b2b1e6643dac9487a57f31d493b4fa7e4355a30a35b3868e
SHA512

9ba11e20e52305a70b875912cb7cfbf054597c8e11e667e1faf966dbf7623b9ed8045acd45be2dab4be833106caa0224f45168afc5dac240154ab66b7604b5bf
SSDEEP

3072:rFWZ1+iVrxn0KQ6SHi9YGOUmuH+W+1ykUAP2+9W:/SJrYGOUMW+1BTP2

Score

6^/10

bootkit persistence

Malware Config

Targets

- Target
  
  4c7aafbbf8ad51599b12578b24884c18_JaffaCakes118
- Size
  
  122KB
- MD5
  
  4c7aafbbf8ad51599b12578b24884c18
- SHA1
  
  ca31f53d3df710f1e5e01c1a70572d86702fbb13
- SHA256
  
  bd46afa3e1f3ea48b2b1e6643dac9487a57f31d493b4fa7e4355a30a35b3868e
- SHA512
  
  9ba11e20e52305a70b875912cb7cfbf054597c8e11e667e1faf966dbf7623b9ed8045acd45be2dab4be833106caa0224f45168afc5dac240154ab66b7604b5bf
- SSDEEP
  
  3072:rFWZ1+iVrxn0KQ6SHi9YGOUmuH+W+1ykUAP2+9W:/SJrYGOUMW+1BTP2
Score

6^/10

bootkit persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2