Overview

overview

8

Static

static

3

65d5d19393...18.exe

windows7-x64

8

65d5d19393...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65d5d19393fb5059140f544cdc069acb_JaffaCakes118

  • Size

    199KB

  • Sample

    240723-c8jygstaqg

  • MD5

    65d5d19393fb5059140f544cdc069acb

  • SHA1

    5e61fb9e0b21fd0975bc18ad6cd96718e05e23d1

  • SHA256

    cc193206232adf835544c948ce0a4385f7bf575d9b9952ebeb1f91d1be6032ad

  • SHA512

    6cc69e9ed1767ba8ffb72d7fa593f63b6485e224f425fa01bdf5225ff78eceda1916b927ef7db699f5fb82abc497458ea769686d6e0e9098d2b5e2419a07caa1

  • SSDEEP

    3072:nG7+lAApeQN5/ioqPTYalF0agXgDKNj9C0c17WIx4SLzNmTUbparjPQHOv:nG7tfQN5/inEaMadDKNa1aIvvozQHOv

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      65d5d19393fb5059140f544cdc069acb_JaffaCakes118

    • Size

      199KB

    • MD5

      65d5d19393fb5059140f544cdc069acb

    • SHA1

      5e61fb9e0b21fd0975bc18ad6cd96718e05e23d1

    • SHA256

      cc193206232adf835544c948ce0a4385f7bf575d9b9952ebeb1f91d1be6032ad

    • SHA512

      6cc69e9ed1767ba8ffb72d7fa593f63b6485e224f425fa01bdf5225ff78eceda1916b927ef7db699f5fb82abc497458ea769686d6e0e9098d2b5e2419a07caa1

    • SSDEEP

      3072:nG7+lAApeQN5/ioqPTYalF0agXgDKNj9C0c17WIx4SLzNmTUbparjPQHOv:nG7tfQN5/inEaMadDKNa1aIvvozQHOv

    Score
    8/10
    bootkitpersistence

    • Drops file in Drivers directory

    • Server Software Component: Terminal Services DLL

      persistence

    • Deletes itself

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks