Overview

overview

6

Static

static

3

748ee65b5e...18.exe

windows7-x64

6

748ee65b5e...18.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    748ee65b5e0f2b75fa1b7b62cb448f3b_JaffaCakes118

  • Size

    748KB

  • Sample

    240726-shffdavfkq

  • MD5

    748ee65b5e0f2b75fa1b7b62cb448f3b

  • SHA1

    66f1518c4abbfd5cd64f9fe43ee0f4837d6213bd

  • SHA256

    dae7588feede6582142a313777b9b4c45393ba836b7d1cbf962823d29c936197

  • SHA512

    704c1048db089e64393e9ae4b41706d0b4e57826d5b18b070577e53ace6a7bacc802812c3aa5f502f13b5d294bb142c19747153f90ef95cd0e0cc6449563d201

  • SSDEEP

    12288:yjwlbsmv/h/8YtVXbCbxIJOWfxG+b7dtv1gH6A+5aFC55yfIk1BVzYKj86spfdQ:WwlfFr1JOcG+bh91lA8xDyfdPpYOIVQ

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      748ee65b5e0f2b75fa1b7b62cb448f3b_JaffaCakes118

    • Size

      748KB

    • MD5

      748ee65b5e0f2b75fa1b7b62cb448f3b

    • SHA1

      66f1518c4abbfd5cd64f9fe43ee0f4837d6213bd

    • SHA256

      dae7588feede6582142a313777b9b4c45393ba836b7d1cbf962823d29c936197

    • SHA512

      704c1048db089e64393e9ae4b41706d0b4e57826d5b18b070577e53ace6a7bacc802812c3aa5f502f13b5d294bb142c19747153f90ef95cd0e0cc6449563d201

    • SSDEEP

      12288:yjwlbsmv/h/8YtVXbCbxIJOWfxG+b7dtv1gH6A+5aFC55yfIk1BVzYKj86spfdQ:WwlfFr1JOcG+bh91lA8xDyfdPpYOIVQ

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks