Overview

overview

7

Static

static

3

94eaeefaa7...18.exe

windows7-x64

7

94eaeefaa7...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    94eaeefaa74cd4f5c514e8fc597ec178_JaffaCakes118

  • Size

    156KB

  • Sample

    240813-1zj4wsydjc

  • MD5

    94eaeefaa74cd4f5c514e8fc597ec178

  • SHA1

    04e1583b4a45fe8a46e9650f9df57e9604500097

  • SHA256

    c88258da586f9e3daf2e617de63709b5d0befb693604245755a93fe8e1f3fc03

  • SHA512

    fe44f6b630b02e6ec36d5f9a84b48473964f19c6ed7b127efe1089d0eb92eef258c2896342e05bb6dac5e0a4524bf0a3f1ae406e8e949cde9300a13886fc327b

  • SSDEEP

    3072:md18UaFPmgRMNlPTGQQm6ytwZEsrYkK4JhnhM71wof:S298gWNlPTGQQm6agrdJhnhMxw4

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      94eaeefaa74cd4f5c514e8fc597ec178_JaffaCakes118

    • Size

      156KB

    • MD5

      94eaeefaa74cd4f5c514e8fc597ec178

    • SHA1

      04e1583b4a45fe8a46e9650f9df57e9604500097

    • SHA256

      c88258da586f9e3daf2e617de63709b5d0befb693604245755a93fe8e1f3fc03

    • SHA512

      fe44f6b630b02e6ec36d5f9a84b48473964f19c6ed7b127efe1089d0eb92eef258c2896342e05bb6dac5e0a4524bf0a3f1ae406e8e949cde9300a13886fc327b

    • SSDEEP

      3072:md18UaFPmgRMNlPTGQQm6ytwZEsrYkK4JhnhM71wof:S298gWNlPTGQQm6agrdJhnhMxw4

    Score
    7/10
    bootkitdiscoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks