Overview

overview

6

Static

static

3

7697256c5b...18.exe

windows7-x64

6

7697256c5b...18.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7697256c5b9a988ca41722a90199fdc5_JaffaCakes118

  • Size

    536KB

  • Sample

    240727-b46q1s1hqd

  • MD5

    7697256c5b9a988ca41722a90199fdc5

  • SHA1

    b92d25f76277beb4995f4b1296d7db770a367e27

  • SHA256

    fc8776e3a9f25a4ff422d230b0483c5860b5ba4eae2423af9a9e89feebcd5d4b

  • SHA512

    825218116dea400ded21366852aac37d7daf4e0c1831160cf2954f5427c9cf287ba0a2be064e5db96c3a65782c8918206790bec0f3049c398aeb56fcb787d784

  • SSDEEP

    12288:5ScWseCbvmZTqRa5sEetJlryelVzYKj86s8kwxe:T3ET/5shHl+opYOgwxe

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      7697256c5b9a988ca41722a90199fdc5_JaffaCakes118

    • Size

      536KB

    • MD5

      7697256c5b9a988ca41722a90199fdc5

    • SHA1

      b92d25f76277beb4995f4b1296d7db770a367e27

    • SHA256

      fc8776e3a9f25a4ff422d230b0483c5860b5ba4eae2423af9a9e89feebcd5d4b

    • SHA512

      825218116dea400ded21366852aac37d7daf4e0c1831160cf2954f5427c9cf287ba0a2be064e5db96c3a65782c8918206790bec0f3049c398aeb56fcb787d784

    • SSDEEP

      12288:5ScWseCbvmZTqRa5sEetJlryelVzYKj86s8kwxe:T3ET/5shHl+opYOgwxe

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks