Overview

overview

7

Static

static

7

bc31ac4327...18.exe

windows7-x64

7

bc31ac4327...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc31ac4327377d4594a00825e607c197_JaffaCakes118

  • Size

    236KB

  • Sample

    240823-r81zbs1akd

  • MD5

    bc31ac4327377d4594a00825e607c197

  • SHA1

    670bad36732844a5a10d09aeeb9c47eebd45ac33

  • SHA256

    8e25b8a3cb1392494ca2c54a1a69e042c16e9feeb2ca75129dd23029b80dd13b

  • SHA512

    05acff5c15b1d10e1fcfbdf9deda5cb21433e599b385e29b2b59867a546d51e3ee7f01f30d394b2f5e5e951cad893286c45514b7ce25aaa99ca689b22513e8b6

  • SSDEEP

    3072:SlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8Pyqs6SMj6aL1VPnSq:p3kOMeaavF17EP6qyqs6SMj6aLvSq

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      bc31ac4327377d4594a00825e607c197_JaffaCakes118

    • Size

      236KB

    • MD5

      bc31ac4327377d4594a00825e607c197

    • SHA1

      670bad36732844a5a10d09aeeb9c47eebd45ac33

    • SHA256

      8e25b8a3cb1392494ca2c54a1a69e042c16e9feeb2ca75129dd23029b80dd13b

    • SHA512

      05acff5c15b1d10e1fcfbdf9deda5cb21433e599b385e29b2b59867a546d51e3ee7f01f30d394b2f5e5e951cad893286c45514b7ce25aaa99ca689b22513e8b6

    • SSDEEP

      3072:SlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8Pyqs6SMj6aL1VPnSq:p3kOMeaavF17EP6qyqs6SMj6aLvSq

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks