Overview

overview

6

Static

static

3

81c447d215...18.dll

windows7-x64

6

81c447d215...18.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    81c447d215c83cfe8fe239fa01936a9b_JaffaCakes118

  • Size

    72KB

  • Sample

    240801-zxxfrs1amg

  • MD5

    81c447d215c83cfe8fe239fa01936a9b

  • SHA1

    ef2060d2ea361cc7a6a3538d73c0c62ca175ef45

  • SHA256

    0c15db79bec7a2ac3b12e1fc92d3aa2ff5ddbe1177067bbb46ce010853da3961

  • SHA512

    b8894eb76d708cd965fd5f59c42521caa2d195245e5198d1c78373badd8a084e5f1b74afd20b65035acce25e959c2cf9eaaf95726519934d1b99459dea31f6c7

  • SSDEEP

    1536:3dJdonTVANNSIw96iJv1mW3CQgAToBwftl8zTIaE:3dJdonTVANNSIw96i58W3CvOoBwrYMaE

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      81c447d215c83cfe8fe239fa01936a9b_JaffaCakes118

    • Size

      72KB

    • MD5

      81c447d215c83cfe8fe239fa01936a9b

    • SHA1

      ef2060d2ea361cc7a6a3538d73c0c62ca175ef45

    • SHA256

      0c15db79bec7a2ac3b12e1fc92d3aa2ff5ddbe1177067bbb46ce010853da3961

    • SHA512

      b8894eb76d708cd965fd5f59c42521caa2d195245e5198d1c78373badd8a084e5f1b74afd20b65035acce25e959c2cf9eaaf95726519934d1b99459dea31f6c7

    • SSDEEP

      1536:3dJdonTVANNSIw96iJv1mW3CQgAToBwftl8zTIaE:3dJdonTVANNSIw96i58W3CvOoBwrYMaE

    Score
    6/10
    bootkitdiscoverypersistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks