Overview

overview

10

Static

static

3

b027ce3e67...18.exe

windows7-x64

6

b027ce3e67...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b027ce3e6770a85808d1d53a135f2276_JaffaCakes118

  • Size

    314KB

  • Sample

    240820-v1d2daybrl

  • MD5

    b027ce3e6770a85808d1d53a135f2276

  • SHA1

    6d7178a2bde9443c5f677d92d2e99573856fa098

  • SHA256

    6c79ac56dfec67f314693f210febc2fad319c1f89e9b5004995a81dd7f12617d

  • SHA512

    05c5e9687a7982c76ed9adbc5c8643ab852bb4baa405ebbd700b0ff48a5efff84c8089ba809af4fcd92ecdf1efefa2fd9856193afa93afca9c4b2213310885ee

  • SSDEEP

    6144:jFDcyAYA7LJYd+UQvbyHXAFRntMmLEsiCmM+5wVsXuCrO1TB7JoL4:jFDcTi/UbzZmMPWNabqk

Score
10/10
bootkitdiscoveryevasionpersistence

Malware Config

Targets

    • Target

      b027ce3e6770a85808d1d53a135f2276_JaffaCakes118

    • Size

      314KB

    • MD5

      b027ce3e6770a85808d1d53a135f2276

    • SHA1

      6d7178a2bde9443c5f677d92d2e99573856fa098

    • SHA256

      6c79ac56dfec67f314693f210febc2fad319c1f89e9b5004995a81dd7f12617d

    • SHA512

      05c5e9687a7982c76ed9adbc5c8643ab852bb4baa405ebbd700b0ff48a5efff84c8089ba809af4fcd92ecdf1efefa2fd9856193afa93afca9c4b2213310885ee

    • SSDEEP

      6144:jFDcyAYA7LJYd+UQvbyHXAFRntMmLEsiCmM+5wVsXuCrO1TB7JoL4:jFDcTi/UbzZmMPWNabqk

    Score
    10/10
    bootkitdiscoverypersistenceevasion

    • Modifies firewall policy service

      evasion

    • Drops file in Drivers directory

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks