Overview

overview

7

Static

static

7

b850cb97b9...18.exe

windows7-x64

7

b850cb97b9...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b850cb97b97e7a8a6e60b1ab6b52f65b_JaffaCakes118

  • Size

    208KB

  • Sample

    240822-ts2l2awfpa

  • MD5

    b850cb97b97e7a8a6e60b1ab6b52f65b

  • SHA1

    6a89a6b94fb02b529541185fe2da5ed5f399645d

  • SHA256

    c30e5f75d59fc10207e7b10de5feb489740748fa864509d6e98f7640661b8954

  • SHA512

    ebb4029d0ac4e9602f7c61133d460769be58f23cf940d94d8d95ba22cdfce9b51f22e98ce78f02e4da8594484dd8ef0e73c48cea711f21ee178a568814e660b8

  • SSDEEP

    6144:qozMw1Zn/OgHRmHwffT39pcJ/TVQ4zZHEai/ZNdvIJ:Hn/3vf+xQ4zpBwrdv

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      b850cb97b97e7a8a6e60b1ab6b52f65b_JaffaCakes118

    • Size

      208KB

    • MD5

      b850cb97b97e7a8a6e60b1ab6b52f65b

    • SHA1

      6a89a6b94fb02b529541185fe2da5ed5f399645d

    • SHA256

      c30e5f75d59fc10207e7b10de5feb489740748fa864509d6e98f7640661b8954

    • SHA512

      ebb4029d0ac4e9602f7c61133d460769be58f23cf940d94d8d95ba22cdfce9b51f22e98ce78f02e4da8594484dd8ef0e73c48cea711f21ee178a568814e660b8

    • SSDEEP

      6144:qozMw1Zn/OgHRmHwffT39pcJ/TVQ4zZHEai/ZNdvIJ:Hn/3vf+xQ4zpBwrdv

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks