Overview

overview

6

Static

static

3

8ed462d464...18.exe

windows7-x64

6

8ed462d464...18.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    8ed462d4641b369783f361ad70008fbb_JaffaCakes118

  • Size

    232KB

  • Sample

    240812-qbc1kasbrn

  • MD5

    8ed462d4641b369783f361ad70008fbb

  • SHA1

    b6f4b7a5b6701906aa4861e70fdbc0dd44bdabf6

  • SHA256

    8e2b5952b4d854f18a7c2ee68a3e78f96fe7497cb7bfeaecb0ab46a539c4b2e8

  • SHA512

    b2f50d0eca07dcf6a603f91db6feaffc2ec5b35c5a1e7a7f239ea93b21533be2fd345770c39fcfb37a49fab55289189e6944a8dc0f6af49e979e7842a75d4393

  • SSDEEP

    6144:USA3XqH0Ght7oIkQF5nVW5GJZ2tNYLj8MfseNQM67qMg9:3c4rqwVzYKj86sesuD9

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      8ed462d4641b369783f361ad70008fbb_JaffaCakes118

    • Size

      232KB

    • MD5

      8ed462d4641b369783f361ad70008fbb

    • SHA1

      b6f4b7a5b6701906aa4861e70fdbc0dd44bdabf6

    • SHA256

      8e2b5952b4d854f18a7c2ee68a3e78f96fe7497cb7bfeaecb0ab46a539c4b2e8

    • SHA512

      b2f50d0eca07dcf6a603f91db6feaffc2ec5b35c5a1e7a7f239ea93b21533be2fd345770c39fcfb37a49fab55289189e6944a8dc0f6af49e979e7842a75d4393

    • SSDEEP

      6144:USA3XqH0Ght7oIkQF5nVW5GJZ2tNYLj8MfseNQM67qMg9:3c4rqwVzYKj86sesuD9

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks