Overview

overview

6

Static

static

3

bd4b8a7ba0...18.exe

windows7-x64

6

bd4b8a7ba0...18.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    bd4b8a7ba031bc8667692b9c7451c948_JaffaCakes118

  • Size

    19KB

  • Sample

    240823-1rybjs1dnn

  • MD5

    bd4b8a7ba031bc8667692b9c7451c948

  • SHA1

    f0bca684bc364e39c8370a9dd1a823cd18bf4c12

  • SHA256

    dfd809aea45196579c41dd8910310a4bff96281bd60e81f22c5b21cab4cd79e8

  • SHA512

    dfb127919baf93df26622a2b7480001f1331a8d795da068ed6a1d5ca25c5b761c8a2cce93446330e4e85d072620fe20f6025dfb3ad95f0c5c88eb3616de19c45

  • SSDEEP

    384:yL+2kiihbprsCjMEyt2/f9bANDMz7Tk3Zglw7qqTFKA0RxzGXI:yK2e9XJyYf2DMHTk3OlIzpJ0Rx

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      bd4b8a7ba031bc8667692b9c7451c948_JaffaCakes118

    • Size

      19KB

    • MD5

      bd4b8a7ba031bc8667692b9c7451c948

    • SHA1

      f0bca684bc364e39c8370a9dd1a823cd18bf4c12

    • SHA256

      dfd809aea45196579c41dd8910310a4bff96281bd60e81f22c5b21cab4cd79e8

    • SHA512

      dfb127919baf93df26622a2b7480001f1331a8d795da068ed6a1d5ca25c5b761c8a2cce93446330e4e85d072620fe20f6025dfb3ad95f0c5c88eb3616de19c45

    • SSDEEP

      384:yL+2kiihbprsCjMEyt2/f9bANDMz7Tk3Zglw7qqTFKA0RxzGXI:yK2e9XJyYf2DMHTk3OlIzpJ0Rx

    Score
    6/10
    bootkitdiscoverypersistence

    • Program crash

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks