Overview

overview

6

Static

static

3

76189d4dd3...18.exe

windows7-x64

6

76189d4dd3...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    76189d4dd3784335829038c244982223_JaffaCakes118

  • Size

    188KB

  • Sample

    240726-2zc61szfrk

  • MD5

    76189d4dd3784335829038c244982223

  • SHA1

    7c725db9041ea9c47895ae08dd8b07261a59e1ea

  • SHA256

    1f47d221cfb268ac31c0bd6ea893d205b818987a1529127af4793e3c1f509a92

  • SHA512

    9f79205be869eb28f79fb0a04d6ad1d10456e3222f7e060f6b5e653a820656016c7c1d8f3039d7e2c084219088d5c8730588aaa2808726f3ad1e6a4ea35289d6

  • SSDEEP

    3072:jzD6kygw6yDEMdR8tVZnZspAQuJ/Po2vUM48a4kWDrguBPgEuzdBbCV/b3:u5HqtVLrQKXZ4XH+ES4Euza

Score
6/10
bootkitdefense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      76189d4dd3784335829038c244982223_JaffaCakes118

    • Size

      188KB

    • MD5

      76189d4dd3784335829038c244982223

    • SHA1

      7c725db9041ea9c47895ae08dd8b07261a59e1ea

    • SHA256

      1f47d221cfb268ac31c0bd6ea893d205b818987a1529127af4793e3c1f509a92

    • SHA512

      9f79205be869eb28f79fb0a04d6ad1d10456e3222f7e060f6b5e653a820656016c7c1d8f3039d7e2c084219088d5c8730588aaa2808726f3ad1e6a4ea35289d6

    • SSDEEP

      3072:jzD6kygw6yDEMdR8tVZnZspAQuJ/Po2vUM48a4kWDrguBPgEuzdBbCV/b3:u5HqtVLrQKXZ4XH+ES4Euza

    Score
    6/10
    bootkitdefense_evasionpersistencediscovery

    • System Binary Proxy Execution: Verclsid

      Adversaries may abuse Verclsid to proxy execution of malicious code.

      defense_evasion

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks