Overview

overview

6

Static

static

3

a47043ebc0...18.exe

windows7-x64

6

a47043ebc0...18.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    a47043ebc08d6208acfa0705abab2fd8_JaffaCakes118

  • Size

    255KB

  • Sample

    240817-2nw5ratgnq

  • MD5

    a47043ebc08d6208acfa0705abab2fd8

  • SHA1

    3d2cca2ca894966077b4a3d5de668538ac0bf87b

  • SHA256

    8c65f59eca17f13397e7f909ae815fe7ce3573757a8092cb22d5adaeff337137

  • SHA512

    843713ac68a4cca879eec5a84a16df8235a88d019e7ac2fe0e0406595fc65f25bec0f69e45fd6195d1892709926b19f79a09934f615958e44da00fe7683d8f26

  • SSDEEP

    6144:75va83HXGpT8kz3YCseKMImMUhDWRnVW5GJZ2tNYLj8Mfs6UVGoQZv:75vaeHXfkzIBLMYVRVzYKj86s6wGoQZv

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      a47043ebc08d6208acfa0705abab2fd8_JaffaCakes118

    • Size

      255KB

    • MD5

      a47043ebc08d6208acfa0705abab2fd8

    • SHA1

      3d2cca2ca894966077b4a3d5de668538ac0bf87b

    • SHA256

      8c65f59eca17f13397e7f909ae815fe7ce3573757a8092cb22d5adaeff337137

    • SHA512

      843713ac68a4cca879eec5a84a16df8235a88d019e7ac2fe0e0406595fc65f25bec0f69e45fd6195d1892709926b19f79a09934f615958e44da00fe7683d8f26

    • SSDEEP

      6144:75va83HXGpT8kz3YCseKMImMUhDWRnVW5GJZ2tNYLj8Mfs6UVGoQZv:75vaeHXfkzIBLMYVRVzYKj86s6wGoQZv

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks