Overview

overview

6

Static

static

3

bca795d3e9...18.exe

windows7-x64

6

bca795d3e9...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    bca795d3e9d20ecaaca8b651773c8944_JaffaCakes118

  • Size

    148KB

  • Sample

    240823-wsgb7s1bmr

  • MD5

    bca795d3e9d20ecaaca8b651773c8944

  • SHA1

    bfeb60ed8a6eef2efb5d8fa2883aac0053860307

  • SHA256

    4def1310f35f0bbd1be59674cab1e1bcdc960e57c89f1fb887f8d0e62c8e4124

  • SHA512

    ea83073e3d3e2497253abfafb9c381bf3ffb2f0d3821f2aeb314762196728b7115c3c948600cdee8aba3a4a68a1b25b76e1be5edc2115fd54788bf59fc191e8f

  • SSDEEP

    3072:7GyZGZuq4oxcw9J1Yp9N+VrG9CmBoth4oCVi:6yZqufoieL2yrUKh4oSi

Score
6/10
bootkitdefense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      bca795d3e9d20ecaaca8b651773c8944_JaffaCakes118

    • Size

      148KB

    • MD5

      bca795d3e9d20ecaaca8b651773c8944

    • SHA1

      bfeb60ed8a6eef2efb5d8fa2883aac0053860307

    • SHA256

      4def1310f35f0bbd1be59674cab1e1bcdc960e57c89f1fb887f8d0e62c8e4124

    • SHA512

      ea83073e3d3e2497253abfafb9c381bf3ffb2f0d3821f2aeb314762196728b7115c3c948600cdee8aba3a4a68a1b25b76e1be5edc2115fd54788bf59fc191e8f

    • SSDEEP

      3072:7GyZGZuq4oxcw9J1Yp9N+VrG9CmBoth4oCVi:6yZqufoieL2yrUKh4oSi

    Score
    6/10
    bootkitdiscoverypersistencedefense_evasion

    • System Binary Proxy Execution: Verclsid

      Adversaries may abuse Verclsid to proxy execution of malicious code.

      defense_evasion

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks