Overview

overview

7

Static

static

3

7586546c90...18.exe

windows7-x64

7

7586546c90...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7586546c906d5501510fee1b156eda91_JaffaCakes118

  • Size

    823KB

  • Sample

    240726-yt2qmsvdle

  • MD5

    7586546c906d5501510fee1b156eda91

  • SHA1

    a999be1f698b79542d67360e3803ff63193f86f5

  • SHA256

    a8f44e5a1f0a5fa0af2bdfdfe3229695ff48ab5f3c096e03d1d54c538ddfd3e2

  • SHA512

    7c87d87444d9757ed0b4140eb693f29359b2405e8fb67fb94c64654dbef60e535ff8bf2c580ba1b9ded343ae2b7fb360eca25ffcb1ad6e18a9631fffffc90bcf

  • SSDEEP

    24576:4xz0YELKs2CHxlrthiZY1lUsRWOg1lQmX9zZ:fbLZvSZY1V8OgomNzZ

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      7586546c906d5501510fee1b156eda91_JaffaCakes118

    • Size

      823KB

    • MD5

      7586546c906d5501510fee1b156eda91

    • SHA1

      a999be1f698b79542d67360e3803ff63193f86f5

    • SHA256

      a8f44e5a1f0a5fa0af2bdfdfe3229695ff48ab5f3c096e03d1d54c538ddfd3e2

    • SHA512

      7c87d87444d9757ed0b4140eb693f29359b2405e8fb67fb94c64654dbef60e535ff8bf2c580ba1b9ded343ae2b7fb360eca25ffcb1ad6e18a9631fffffc90bcf

    • SSDEEP

      24576:4xz0YELKs2CHxlrthiZY1lUsRWOg1lQmX9zZ:fbLZvSZY1V8OgomNzZ

    Score
    7/10
    bootkitdiscoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks