Overview

overview

7

Static

static

7

70bf61d26d...18.exe

windows7-x64

7

70bf61d26d...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70bf61d26da78992d96ee3ddd01f7113_JaffaCakes118

  • Size

    316KB

  • Sample

    240725-w51llszgle

  • MD5

    70bf61d26da78992d96ee3ddd01f7113

  • SHA1

    b80db4e4fb0e41f7fc660d1cedfa2d9f346d46f8

  • SHA256

    e52a6a8056d4006509d02bab19ff5d944520a9d83379a9de811cb99152112f94

  • SHA512

    2fbd5f844d91076ff345ed683e0d9c8cbb4ecedac53caaa96fd142d9e30db6f9e859bc8b735da65d8791011ae0738f931a9072f5d7567d0e22fa717daa6ae371

  • SSDEEP

    6144:fJiMpm+TDRlPswEvuB5xJRCSIVnuewQ7hpHL/Y6M52TERC3UPWTuPU+jhy:f42vRlPsBvmxzC/GQVpjYv5gERSUPWis

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      70bf61d26da78992d96ee3ddd01f7113_JaffaCakes118

    • Size

      316KB

    • MD5

      70bf61d26da78992d96ee3ddd01f7113

    • SHA1

      b80db4e4fb0e41f7fc660d1cedfa2d9f346d46f8

    • SHA256

      e52a6a8056d4006509d02bab19ff5d944520a9d83379a9de811cb99152112f94

    • SHA512

      2fbd5f844d91076ff345ed683e0d9c8cbb4ecedac53caaa96fd142d9e30db6f9e859bc8b735da65d8791011ae0738f931a9072f5d7567d0e22fa717daa6ae371

    • SSDEEP

      6144:fJiMpm+TDRlPswEvuB5xJRCSIVnuewQ7hpHL/Y6M52TERC3UPWTuPU+jhy:f42vRlPsBvmxzC/GQVpjYv5gERSUPWis

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks