Overview

overview

7

Static

static

7

88f5863ae4...18.exe

windows7-x64

7

88f5863ae4...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    88f5863ae45e6c61b03f15c9d34f2884_JaffaCakes118

  • Size

    236KB

  • Sample

    240811-evy7csvcpq

  • MD5

    88f5863ae45e6c61b03f15c9d34f2884

  • SHA1

    379f0a2a69e4a70ff33d61f125a4be3454ade1d1

  • SHA256

    381894e8dee69ff3aecdfe248fe482e37c74e04902bf41fe152ca54934a46d57

  • SHA512

    15b36b851455204db567069bbe3d30513fce2d3f17e3032dd7d233fb92e37752bbd377ff141e4f3b107895fa00527c70143ce51d6c1d9133d12b0a711761d9ae

  • SSDEEP

    3072:mlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsHKgLuaCpoBZSMZb:N3kOMeaavF17EP6qyqsqG3Zjub6

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      88f5863ae45e6c61b03f15c9d34f2884_JaffaCakes118

    • Size

      236KB

    • MD5

      88f5863ae45e6c61b03f15c9d34f2884

    • SHA1

      379f0a2a69e4a70ff33d61f125a4be3454ade1d1

    • SHA256

      381894e8dee69ff3aecdfe248fe482e37c74e04902bf41fe152ca54934a46d57

    • SHA512

      15b36b851455204db567069bbe3d30513fce2d3f17e3032dd7d233fb92e37752bbd377ff141e4f3b107895fa00527c70143ce51d6c1d9133d12b0a711761d9ae

    • SSDEEP

      3072:mlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsHKgLuaCpoBZSMZb:N3kOMeaavF17EP6qyqsqG3Zjub6

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks