Overview

overview

6

Static

static

3

947218fe75...18.dll

windows7-x64

6

947218fe75...18.dll

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    947218fe7588c31577cc5287a121e8b4_JaffaCakes118

  • Size

    416KB

  • Sample

    240813-yan1faxapr

  • MD5

    947218fe7588c31577cc5287a121e8b4

  • SHA1

    fca32caadef57811453a36390e13767b888aced8

  • SHA256

    98aac687b99772154e9b31e2cd4b14ddd4334c9583b2df77464be33ccfb21224

  • SHA512

    9bfd2f2e4acd060ab1f48b83774da0d2ad59e58edc0b2a8b86605c5b4351ddfe46de7de4673ccf9faa5af343d9fa72352c6f2862016e516d1e0232017c783c4e

  • SSDEEP

    12288:itoQHEBOZnug2Ry8sk1t9G8Esml6YvzAa94:itoME2m0YvG8VmBP4

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      947218fe7588c31577cc5287a121e8b4_JaffaCakes118

    • Size

      416KB

    • MD5

      947218fe7588c31577cc5287a121e8b4

    • SHA1

      fca32caadef57811453a36390e13767b888aced8

    • SHA256

      98aac687b99772154e9b31e2cd4b14ddd4334c9583b2df77464be33ccfb21224

    • SHA512

      9bfd2f2e4acd060ab1f48b83774da0d2ad59e58edc0b2a8b86605c5b4351ddfe46de7de4673ccf9faa5af343d9fa72352c6f2862016e516d1e0232017c783c4e

    • SSDEEP

      12288:itoQHEBOZnug2Ry8sk1t9G8Esml6YvzAa94:itoME2m0YvG8VmBP4

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks