Overview

overview

7

Static

static

7

5d530d8511...18.exe

windows7-x64

7

5d530d8511...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5d530d851103bed95f415d36cb482c87_JaffaCakes118

  • Size

    469KB

  • Sample

    240719-x4cntszbpc

  • MD5

    5d530d851103bed95f415d36cb482c87

  • SHA1

    ac0a2efa1b3bf7b18000b2d10775f86e7d4616bb

  • SHA256

    81b21007050e6154b80e6434d2de6b237ba2ab96c962f674ccba33d3160c8495

  • SHA512

    e585ef802a9c23b65b34302ca5a7cb5b595abfdd73c11577db20023af7e0feced75c4dc87b7de04a16b15c31915e77ce6899ce0e30d6cb4f56ea4c3df18e21d5

  • SSDEEP

    6144:OV7+rXXlqAOLuiZ9SIbVMbwi3U2e2pKHdevI0P9TTHwOtwsflw/hiwiK36fddi:lDlMKc9Juwi3U2e2HB9Tzwo1fK9T33

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      5d530d851103bed95f415d36cb482c87_JaffaCakes118

    • Size

      469KB

    • MD5

      5d530d851103bed95f415d36cb482c87

    • SHA1

      ac0a2efa1b3bf7b18000b2d10775f86e7d4616bb

    • SHA256

      81b21007050e6154b80e6434d2de6b237ba2ab96c962f674ccba33d3160c8495

    • SHA512

      e585ef802a9c23b65b34302ca5a7cb5b595abfdd73c11577db20023af7e0feced75c4dc87b7de04a16b15c31915e77ce6899ce0e30d6cb4f56ea4c3df18e21d5

    • SSDEEP

      6144:OV7+rXXlqAOLuiZ9SIbVMbwi3U2e2pKHdevI0P9TTHwOtwsflw/hiwiK36fddi:lDlMKc9Juwi3U2e2HB9Tzwo1fK9T33

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks