Overview

overview

7

Static

static

3

73e3898ded...18.exe

windows7-x64

7

73e3898ded...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73e3898ded99d9f062cfb167d5b57635_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240726-nq2lcsyfpd

  • MD5

    73e3898ded99d9f062cfb167d5b57635

  • SHA1

    0b2aa86bccbed7a61a066f48c259433b6af25c1a

  • SHA256

    ff647e3d6a50d31f4a526cdef1af0f7b428716e1e57597ac27ef374580c63925

  • SHA512

    0f7d58c3d1fea43659a6f4ce93150e0d5f1199d9f9465100e099aeb578f7311469e3db4f08c0d3e281d6ffc298bf0945a5cf422430c2e762d8437664762e75cb

  • SSDEEP

    24576:xhcmZ4JV6y3gOv4gfd+e61g4l2G2pfm47S5IBkgdElKcnT9U:xh4Jl7E3g4lYfm47S5IBfdSr9U

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      73e3898ded99d9f062cfb167d5b57635_JaffaCakes118

    • Size

      1.4MB

    • MD5

      73e3898ded99d9f062cfb167d5b57635

    • SHA1

      0b2aa86bccbed7a61a066f48c259433b6af25c1a

    • SHA256

      ff647e3d6a50d31f4a526cdef1af0f7b428716e1e57597ac27ef374580c63925

    • SHA512

      0f7d58c3d1fea43659a6f4ce93150e0d5f1199d9f9465100e099aeb578f7311469e3db4f08c0d3e281d6ffc298bf0945a5cf422430c2e762d8437664762e75cb

    • SSDEEP

      24576:xhcmZ4JV6y3gOv4gfd+e61g4l2G2pfm47S5IBkgdElKcnT9U:xh4Jl7E3g4lYfm47S5IBfdSr9U

    Score
    7/10
    bootkitdiscoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks