Overview

overview

7

Static

static

7

74408863ff...18.exe

windows7-x64

7

74408863ff...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74408863ff02a7b2f3d8817916ea1a2b_JaffaCakes118

  • Size

    228KB

  • Sample

    240726-qqq6qstgnb

  • MD5

    74408863ff02a7b2f3d8817916ea1a2b

  • SHA1

    89783a40dc2800e38e2125f9698ec883952e3617

  • SHA256

    45cb23f06d1776034a20985b8dd42dcfb8dd6e0fba73c5e9846009def835165a

  • SHA512

    e2167311a71e55d4e61b02c31d99c37e15d382ff1ac483fedf102e049656f1d0d2e6760aa24e0534dab70392a4acdb87dc8c375bf849963512b857c60b2cb4ed

  • SSDEEP

    3072:4Ha+w4iRymxWstCvbSxWqCS4KSleWFXVmfuePuw5RDCV8aQePh9u/pxSpgNcUyaV:QWtErWIleOnCTozuxUgNXyaNL6LGdqlY

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      74408863ff02a7b2f3d8817916ea1a2b_JaffaCakes118

    • Size

      228KB

    • MD5

      74408863ff02a7b2f3d8817916ea1a2b

    • SHA1

      89783a40dc2800e38e2125f9698ec883952e3617

    • SHA256

      45cb23f06d1776034a20985b8dd42dcfb8dd6e0fba73c5e9846009def835165a

    • SHA512

      e2167311a71e55d4e61b02c31d99c37e15d382ff1ac483fedf102e049656f1d0d2e6760aa24e0534dab70392a4acdb87dc8c375bf849963512b857c60b2cb4ed

    • SSDEEP

      3072:4Ha+w4iRymxWstCvbSxWqCS4KSleWFXVmfuePuw5RDCV8aQePh9u/pxSpgNcUyaV:QWtErWIleOnCTozuxUgNXyaNL6LGdqlY

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks