Overview

overview

6

Static

static

3

94b046f3ad...18.exe

windows7-x64

6

94b046f3ad...18.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    94b046f3ada46fb2ebaaee99b7a519cb_JaffaCakes118

  • Size

    283KB

  • Sample

    240813-znxeeazfmk

  • MD5

    94b046f3ada46fb2ebaaee99b7a519cb

  • SHA1

    340582b1e6288e1e09a9283ded206e0c7589aaf7

  • SHA256

    cb0643520303c29c64bc7c470b1d4666d97814182ba8d6f55a848618e6158e59

  • SHA512

    d4b80347b31717abc69d4c1818dcd07a32acbfadfad2d8d2c5b01d2ef6062a076681dde54dc251d8f4eb18bacadc8cb6c4c14affc299ccb4177e7a25df6eac61

  • SSDEEP

    6144:r2xheKoWnVh05JSCvIbBTq/T6WuiaZdgmssqEiYJlUq6HVx:rAe/OVyLmg/Targ9sqiJCqmX

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      94b046f3ada46fb2ebaaee99b7a519cb_JaffaCakes118

    • Size

      283KB

    • MD5

      94b046f3ada46fb2ebaaee99b7a519cb

    • SHA1

      340582b1e6288e1e09a9283ded206e0c7589aaf7

    • SHA256

      cb0643520303c29c64bc7c470b1d4666d97814182ba8d6f55a848618e6158e59

    • SHA512

      d4b80347b31717abc69d4c1818dcd07a32acbfadfad2d8d2c5b01d2ef6062a076681dde54dc251d8f4eb18bacadc8cb6c4c14affc299ccb4177e7a25df6eac61

    • SSDEEP

      6144:r2xheKoWnVh05JSCvIbBTq/T6WuiaZdgmssqEiYJlUq6HVx:rAe/OVyLmg/Targ9sqiJCqmX

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks