Overview

overview

7

Static

static

1

b66be3af59...18.exe

windows7-x64

7

b66be3af59...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b66be3af592ceea82c1b7bf21a2ea5d2_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240822-fkyzaashjl

  • MD5

    b66be3af592ceea82c1b7bf21a2ea5d2

  • SHA1

    45a74862f6a6f69ee85155acf947c182c9274007

  • SHA256

    9b695c6a0fa2554017369a1f50c6040478e8ca661d3c16afb1d2e2fa36487cd2

  • SHA512

    beb5c591c70cbd4735c382a1acfd4ac9403c0a97137e3ed9e6a967c3b397d53cf1d460781327df3f372a9ae867345913c3c44e78dfed502905d2cfc751f53e8d

  • SSDEEP

    24576:T5T4XR/5Pnp5ItYM/ABtAbghHXjRZqtSIU06jNnuK+raA+gVTPlc5/N80B:p4t9IWtZ3WtSHRuK+rbVGj80B

Score
7/10
bootkitdiscoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      b66be3af592ceea82c1b7bf21a2ea5d2_JaffaCakes118

    • Size

      1.1MB

    • MD5

      b66be3af592ceea82c1b7bf21a2ea5d2

    • SHA1

      45a74862f6a6f69ee85155acf947c182c9274007

    • SHA256

      9b695c6a0fa2554017369a1f50c6040478e8ca661d3c16afb1d2e2fa36487cd2

    • SHA512

      beb5c591c70cbd4735c382a1acfd4ac9403c0a97137e3ed9e6a967c3b397d53cf1d460781327df3f372a9ae867345913c3c44e78dfed502905d2cfc751f53e8d

    • SSDEEP

      24576:T5T4XR/5Pnp5ItYM/ABtAbghHXjRZqtSIU06jNnuK+raA+gVTPlc5/N80B:p4t9IWtZ3WtSHRuK+rbVGj80B

    Score
    7/10
    bootkitdiscoveryevasionpersistencetrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks