General

  • Target

    7564f3ba0c7eb5a1fd4838ab6d8fd15d_JaffaCakes118

  • Size

    524KB

  • Sample

    240726-x56cjasgrc

  • MD5

    7564f3ba0c7eb5a1fd4838ab6d8fd15d

  • SHA1

    bb861f31d570fa55eaeaa967e72205ac7aa50548

  • SHA256

    7168756d7af526b734c89438e751b4a3f5dc68469d3375710af31f2b20979f55

  • SHA512

    284b19479557d4d6f395a0d62b178860b3ecb90956dcb3d68283135415d5e0e7e4eb3ccf6eeb980012ad0c02f3a3b1a6c97741ca38051b2b746a9aa1abbc0e9f

  • SSDEEP

    3072:0QTPiOqiW9iEIf32ALXnGSeNxhSVAkxbjHB0/tHv9uy1xOwr5gSN9K7hT8lcY2oK:0S32ZNxQieb0hvX1xOwOW4bYOl

Malware Config

Targets

    • Target

      7564f3ba0c7eb5a1fd4838ab6d8fd15d_JaffaCakes118

    • Size

      524KB

    • MD5

      7564f3ba0c7eb5a1fd4838ab6d8fd15d

    • SHA1

      bb861f31d570fa55eaeaa967e72205ac7aa50548

    • SHA256

      7168756d7af526b734c89438e751b4a3f5dc68469d3375710af31f2b20979f55

    • SHA512

      284b19479557d4d6f395a0d62b178860b3ecb90956dcb3d68283135415d5e0e7e4eb3ccf6eeb980012ad0c02f3a3b1a6c97741ca38051b2b746a9aa1abbc0e9f

    • SSDEEP

      3072:0QTPiOqiW9iEIf32ALXnGSeNxhSVAkxbjHB0/tHv9uy1xOwr5gSN9K7hT8lcY2oK:0S32ZNxQieb0hvX1xOwOW4bYOl

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Tasks