Overview

overview

7

Static

static

7

abbf7d3e3c...18.exe

windows7-x64

7

abbf7d3e3c...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    abbf7d3e3cc90942bf39543fce68b18a_JaffaCakes118

  • Size

    228KB

  • Sample

    240819-t11dyayarq

  • MD5

    abbf7d3e3cc90942bf39543fce68b18a

  • SHA1

    70e1abd5a93585aa5add41bc562c8ce7df50156c

  • SHA256

    29358451c8390845b086b4199dd085eb84e3fa42998ca9a8259243abe7cfc73d

  • SHA512

    ea608d7407f951f2c7e6cd1c129610997b67f63651fcd666e2c50a7af13027cafb0fe2f6ee7dfea7500232b6698aac694550c1221dc9402bb51fb18f3dc85af3

  • SSDEEP

    6144:qQGCAQLvOUkq77vXaH7ylF57M7+9CNau5Yn7ux:nVNXl+GC+9u68

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      abbf7d3e3cc90942bf39543fce68b18a_JaffaCakes118

    • Size

      228KB

    • MD5

      abbf7d3e3cc90942bf39543fce68b18a

    • SHA1

      70e1abd5a93585aa5add41bc562c8ce7df50156c

    • SHA256

      29358451c8390845b086b4199dd085eb84e3fa42998ca9a8259243abe7cfc73d

    • SHA512

      ea608d7407f951f2c7e6cd1c129610997b67f63651fcd666e2c50a7af13027cafb0fe2f6ee7dfea7500232b6698aac694550c1221dc9402bb51fb18f3dc85af3

    • SSDEEP

      6144:qQGCAQLvOUkq77vXaH7ylF57M7+9CNau5Yn7ux:nVNXl+GC+9u68

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks