Overview

overview

6

Static

static

3

94b9c83b81...18.dll

windows7-x64

6

94b9c83b81...18.dll

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    94b9c83b8126ea8c6714c3bac32225d6_JaffaCakes118

  • Size

    376KB

  • Sample

    240813-zwlmwawdkf

  • MD5

    94b9c83b8126ea8c6714c3bac32225d6

  • SHA1

    2b0336d756cc45df28fc083436a9a0d614b8e4af

  • SHA256

    be3d67a7e09fe8e93001d4ea46eb47c24d8000e6578f7b64518268cf476b27cc

  • SHA512

    517a6b22910b5f82e8494e69a00ab2c1300314160f6307a46e6586f92ddcd19288bbfc06151db02e764e44fd26e1e122f1305c144a2e17010baf8bf53775dc94

  • SSDEEP

    6144:rJ0Ox5RfQbGuFsJ85iPC0YwxNM/pkd4noOJ0GhKlahSCN6LKz:rJ0Ox5RATSJ85aC0JSxkd2oOJ0OMaoCB

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      94b9c83b8126ea8c6714c3bac32225d6_JaffaCakes118

    • Size

      376KB

    • MD5

      94b9c83b8126ea8c6714c3bac32225d6

    • SHA1

      2b0336d756cc45df28fc083436a9a0d614b8e4af

    • SHA256

      be3d67a7e09fe8e93001d4ea46eb47c24d8000e6578f7b64518268cf476b27cc

    • SHA512

      517a6b22910b5f82e8494e69a00ab2c1300314160f6307a46e6586f92ddcd19288bbfc06151db02e764e44fd26e1e122f1305c144a2e17010baf8bf53775dc94

    • SSDEEP

      6144:rJ0Ox5RfQbGuFsJ85iPC0YwxNM/pkd4noOJ0GhKlahSCN6LKz:rJ0Ox5RATSJ85aC0JSxkd2oOJ0OMaoCB

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks