Overview

overview

7

Static

static

7

8d5c7f84e9...18.exe

windows7-x64

7

8d5c7f84e9...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d5c7f84e9383df3b48bfd8503a3809c_JaffaCakes118

  • Size

    241KB

  • Sample

    240812-fcx21swcnn

  • MD5

    8d5c7f84e9383df3b48bfd8503a3809c

  • SHA1

    984bde7e5d078089c5acc38a0eb0fc8d991250ab

  • SHA256

    766d7a3c0c0b87e193fc3c39e19140091a5d58042c0fa32761e74ae0ccc666a3

  • SHA512

    6471a9275df6741757fef2f956f0c26ab60d46b64eb872076aea2dc1cc5cc43373c4ddad1aa83134aa049bf7b2d734e9b2615664f97c7547dc5247b22b0ca5ac

  • SSDEEP

    6144:okeENDvTSn2SV/GuhYdViC7X57+nMSAorux7c:oNEND/k/GLPX57+ndFrux7c

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      8d5c7f84e9383df3b48bfd8503a3809c_JaffaCakes118

    • Size

      241KB

    • MD5

      8d5c7f84e9383df3b48bfd8503a3809c

    • SHA1

      984bde7e5d078089c5acc38a0eb0fc8d991250ab

    • SHA256

      766d7a3c0c0b87e193fc3c39e19140091a5d58042c0fa32761e74ae0ccc666a3

    • SHA512

      6471a9275df6741757fef2f956f0c26ab60d46b64eb872076aea2dc1cc5cc43373c4ddad1aa83134aa049bf7b2d734e9b2615664f97c7547dc5247b22b0ca5ac

    • SSDEEP

      6144:okeENDvTSn2SV/GuhYdViC7X57+nMSAorux7c:oNEND/k/GLPX57+ndFrux7c

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks