Overview

overview

6

Static

static

3

69863824e8...18.exe

windows7-x64

6

69863824e8...18.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69863824e8cb2a6f01bf58275d2eab19_JaffaCakes118

  • Size

    884KB

  • Sample

    240724-ahxesawhkj

  • MD5

    69863824e8cb2a6f01bf58275d2eab19

  • SHA1

    6228851b9aea379476ce4de29d916460c6254d4a

  • SHA256

    f88a4e4b5ca7d72d46f4b1ee739cfae813cf1d0f20d0e3675e0c9836145b95d8

  • SHA512

    45325f70dc065540b2d7863c140923a8901710efdd80fcacc41e58141dcd2ab725398ec60b10f3d5a65c913794e83216c3095eb98819d1c46e72d7777ab53d66

  • SSDEEP

    24576:JyLEuI7enxC2nvIAt9SYDb6S4axIgcsJglqvaKR8/pYOZC5mW:JepI7enxC2w69dDb6S4AIgLv5GSQE

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      69863824e8cb2a6f01bf58275d2eab19_JaffaCakes118

    • Size

      884KB

    • MD5

      69863824e8cb2a6f01bf58275d2eab19

    • SHA1

      6228851b9aea379476ce4de29d916460c6254d4a

    • SHA256

      f88a4e4b5ca7d72d46f4b1ee739cfae813cf1d0f20d0e3675e0c9836145b95d8

    • SHA512

      45325f70dc065540b2d7863c140923a8901710efdd80fcacc41e58141dcd2ab725398ec60b10f3d5a65c913794e83216c3095eb98819d1c46e72d7777ab53d66

    • SSDEEP

      24576:JyLEuI7enxC2nvIAt9SYDb6S4axIgcsJglqvaKR8/pYOZC5mW:JepI7enxC2w69dDb6S4AIgLv5GSQE

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks