General

  • Target

    74cb39a907ceb36b1420a6bf1a418efe_JaffaCakes118

  • Size

    255KB

  • Sample

    240726-try5hsyenq

  • MD5

    74cb39a907ceb36b1420a6bf1a418efe

  • SHA1

    22addb7204b6887be091d7cd74e6b1217660fda2

  • SHA256

    00cc6b8f5964c78b0be201e49a8fa520fd56e0753cc457ce410192c76d822ef5

  • SHA512

    95cd52c9985a4f6921294e4064d65c131cda3a77cea4f240b7e2f05467bc0eda4c8b3910d9865233af532c70d7ce8c4e3f1494f3928a4ceacddcf93bee86c103

  • SSDEEP

    6144:/aMlSykJahFf65vZZYLiMqL4TyQOI5JgpcvqNplcV+o:Fl4JkVqxZVoT0Iw5pQr

Malware Config

Targets

    • Target

      74cb39a907ceb36b1420a6bf1a418efe_JaffaCakes118

    • Size

      255KB

    • MD5

      74cb39a907ceb36b1420a6bf1a418efe

    • SHA1

      22addb7204b6887be091d7cd74e6b1217660fda2

    • SHA256

      00cc6b8f5964c78b0be201e49a8fa520fd56e0753cc457ce410192c76d822ef5

    • SHA512

      95cd52c9985a4f6921294e4064d65c131cda3a77cea4f240b7e2f05467bc0eda4c8b3910d9865233af532c70d7ce8c4e3f1494f3928a4ceacddcf93bee86c103

    • SSDEEP

      6144:/aMlSykJahFf65vZZYLiMqL4TyQOI5JgpcvqNplcV+o:Fl4JkVqxZVoT0Iw5pQr

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks