Overview

overview

6

Static

static

3

89cbdeef3c...18.dll

windows7-x64

6

89cbdeef3c...18.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    89cbdeef3c93f73983e36695502d6568_JaffaCakes118

  • Size

    120KB

  • Sample

    240811-k5w3mstbkm

  • MD5

    89cbdeef3c93f73983e36695502d6568

  • SHA1

    3f99a6d8a8a941f7b5ada637e0a0bcb4259edcb8

  • SHA256

    e3e021bb536421a1c8fd4722d193fb311a771385167985a63c701fa263b42db1

  • SHA512

    8b6bd5eecf92dce760050398634664f6aa9954a048f93e5646372885697c63c7225a161924358b6a1cf814800e6e24de36a3628a55204963b0642e6abdbc59d7

  • SSDEEP

    3072:/glOWHkPcbv+kAFg5H/36tjv5tBZ7ULFHqukkkkfkkkk4kkkZkkf:/glOOktFe3WvlZ7mkkkkfkkkk4kkkZkM

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      89cbdeef3c93f73983e36695502d6568_JaffaCakes118

    • Size

      120KB

    • MD5

      89cbdeef3c93f73983e36695502d6568

    • SHA1

      3f99a6d8a8a941f7b5ada637e0a0bcb4259edcb8

    • SHA256

      e3e021bb536421a1c8fd4722d193fb311a771385167985a63c701fa263b42db1

    • SHA512

      8b6bd5eecf92dce760050398634664f6aa9954a048f93e5646372885697c63c7225a161924358b6a1cf814800e6e24de36a3628a55204963b0642e6abdbc59d7

    • SSDEEP

      3072:/glOWHkPcbv+kAFg5H/36tjv5tBZ7ULFHqukkkkfkkkk4kkkZkkf:/glOOktFe3WvlZ7mkkkkfkkkk4kkkZkM

    Score
    6/10
    bootkitdiscoverypersistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks