Overview

overview

7

Static

static

7

a1e36bfa92...18.exe

windows7-x64

7

a1e36bfa92...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    a1e36bfa92f06acd12b6120e48a9262d_JaffaCakes118

  • Size

    307KB

  • Sample

    240817-kndvqszeqq

  • MD5

    a1e36bfa92f06acd12b6120e48a9262d

  • SHA1

    94aa4091b5de4513a0a2062b01d6df50a5dcda8c

  • SHA256

    02ce0c9c9a3cf0f3b963ce538b1f4858da529d666431c0790bc92f0b6a8a0681

  • SHA512

    438650b3f4f13eee1cb3b7f2dcf36c6b249a90a4f335366f486bfdd4c9a5f0ab55a4170737c17debbf7d4b27a09aba662f60f6b79b4de7e581b0956f77ab1e9d

  • SSDEEP

    6144:DNKIK84tmzVZMrRhZf4th5JNoQud6/XRi+VScbRv4:O84tmzgrlMh5/oQud65lVTbh4

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      a1e36bfa92f06acd12b6120e48a9262d_JaffaCakes118

    • Size

      307KB

    • MD5

      a1e36bfa92f06acd12b6120e48a9262d

    • SHA1

      94aa4091b5de4513a0a2062b01d6df50a5dcda8c

    • SHA256

      02ce0c9c9a3cf0f3b963ce538b1f4858da529d666431c0790bc92f0b6a8a0681

    • SHA512

      438650b3f4f13eee1cb3b7f2dcf36c6b249a90a4f335366f486bfdd4c9a5f0ab55a4170737c17debbf7d4b27a09aba662f60f6b79b4de7e581b0956f77ab1e9d

    • SSDEEP

      6144:DNKIK84tmzVZMrRhZf4th5JNoQud6/XRi+VScbRv4:O84tmzgrlMh5/oQud65lVTbh4

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks