Overview

overview

7

Static

static

7

6032690688...18.exe

windows7-x64

7

6032690688...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    603269068868e4e13851bb77461fabd1_JaffaCakes118

  • Size

    307KB

  • Sample

    240720-18ldbazbmr

  • MD5

    603269068868e4e13851bb77461fabd1

  • SHA1

    d36779596ba3c2d80e748c73eb0ecd411aab1509

  • SHA256

    68524814488e33e0798d71029e20548c5b9b0e722b3f9d0a5c244377ebdee5bd

  • SHA512

    5a776d0fd523d5f0a01c9ee074b68c9a0d3feed23b71e6295b17dc70087e7a0c65f6a0459b63d7d59f4037a71bc547f9c63fe643d5ed281cb960b55eb860f6a5

  • SSDEEP

    6144:ZNKIK84tmzVZMrRhZf4thY6k/DpvJZVSR+W1ysKOO4t+/Ws:Q84tmzgrlMhM/DpvJyICyoO4t+/Ws

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      603269068868e4e13851bb77461fabd1_JaffaCakes118

    • Size

      307KB

    • MD5

      603269068868e4e13851bb77461fabd1

    • SHA1

      d36779596ba3c2d80e748c73eb0ecd411aab1509

    • SHA256

      68524814488e33e0798d71029e20548c5b9b0e722b3f9d0a5c244377ebdee5bd

    • SHA512

      5a776d0fd523d5f0a01c9ee074b68c9a0d3feed23b71e6295b17dc70087e7a0c65f6a0459b63d7d59f4037a71bc547f9c63fe643d5ed281cb960b55eb860f6a5

    • SSDEEP

      6144:ZNKIK84tmzVZMrRhZf4thY6k/DpvJZVSR+W1ysKOO4t+/Ws:Q84tmzgrlMhM/DpvJyICyoO4t+/Ws

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks