Overview

overview

7

Static

static

7

a0e71ef33b...18.exe

windows7-x64

7

a0e71ef33b...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a0e71ef33b4b68a57bf44bdea9f1da6b_JaffaCakes118

  • Size

    543KB

  • Sample

    240817-c5m6qswcpn

  • MD5

    a0e71ef33b4b68a57bf44bdea9f1da6b

  • SHA1

    5c067224ef054688988aae18b53eec94cacd2a61

  • SHA256

    e69d9837e751077be7701e23df28642538903c286476e1bd669cdb13b95c1f83

  • SHA512

    64a90a5aef3f272047b53d1e1fdfd8a1982402a1281a4e4d89ea26f9149a2082fc00652cb31df07044be8b74962ee888483b56773ccb33dd6f8290a64d6bca1b

  • SSDEEP

    6144:jm8tSjMcCFgjGFF2OpG1pmyi1jHetjJDIu8ubn7ZXi1vSnCUCguQOYGyIJ:jmBegjGFrg1mqZXQqCU7uQiJ

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      a0e71ef33b4b68a57bf44bdea9f1da6b_JaffaCakes118

    • Size

      543KB

    • MD5

      a0e71ef33b4b68a57bf44bdea9f1da6b

    • SHA1

      5c067224ef054688988aae18b53eec94cacd2a61

    • SHA256

      e69d9837e751077be7701e23df28642538903c286476e1bd669cdb13b95c1f83

    • SHA512

      64a90a5aef3f272047b53d1e1fdfd8a1982402a1281a4e4d89ea26f9149a2082fc00652cb31df07044be8b74962ee888483b56773ccb33dd6f8290a64d6bca1b

    • SSDEEP

      6144:jm8tSjMcCFgjGFF2OpG1pmyi1jHetjJDIu8ubn7ZXi1vSnCUCguQOYGyIJ:jmBegjGFrg1mqZXQqCU7uQiJ

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks