Overview

overview

10

Static

static

3

bd70320e7e...18.exe

windows7-x64

10

bd70320e7e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd70320e7e461bd644373c7ee9b385ae_JaffaCakes118

  • Size

    26KB

  • Sample

    240823-2j4zss1dlg

  • MD5

    bd70320e7e461bd644373c7ee9b385ae

  • SHA1

    22c090e49d305d2254ae47bbf25e1aeb61e3a7d4

  • SHA256

    041f381f32ab32960f0ca733243e766a537a80773665b3c9855e08625d0f53a8

  • SHA512

    984b2cd7b8a8c5ca75e481772ce94470cb4d5ec2bd23970bf20b422db5155c08a770642496a492c0fb787c095487cc00288e2f1f22c5ad07c8da2b06d229817b

  • SSDEEP

    768:mb1kNbf6EBlHKwTvtRL0aswhUMRwkkS6:U1kNbyEBBJJz/hHRwk

Score
10/10
bootkitdiscoveryevasionpersistence

Malware Config

Targets

    • Target

      bd70320e7e461bd644373c7ee9b385ae_JaffaCakes118

    • Size

      26KB

    • MD5

      bd70320e7e461bd644373c7ee9b385ae

    • SHA1

      22c090e49d305d2254ae47bbf25e1aeb61e3a7d4

    • SHA256

      041f381f32ab32960f0ca733243e766a537a80773665b3c9855e08625d0f53a8

    • SHA512

      984b2cd7b8a8c5ca75e481772ce94470cb4d5ec2bd23970bf20b422db5155c08a770642496a492c0fb787c095487cc00288e2f1f22c5ad07c8da2b06d229817b

    • SSDEEP

      768:mb1kNbf6EBlHKwTvtRL0aswhUMRwkkS6:U1kNbyEBBJJz/hHRwk

    Score
    10/10
    bootkitevasionpersistencediscovery

    • Modifies visibility of file extensions in Explorer

      evasion

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks