Overview

overview

7

Static

static

3

c16519d885...18.exe

windows7-x64

7

c16519d885...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c16519d8852a6a62600ea202eaae5bed_JaffaCakes118

  • Size

    380KB

  • Sample

    240825-xvpl2azdnc

  • MD5

    c16519d8852a6a62600ea202eaae5bed

  • SHA1

    f3b8e5de4649658f57b7070529dca5421c448fff

  • SHA256

    7c7e97dfdcc13a4cedb21db39e22a41c5c285cd097f875b6216b688f8450fd5a

  • SHA512

    54c40591eb8a37d2eed54ee36955447a121ddce73f906014af45e6d955287ab80eec1136f231b5d7c6544f4234d144de141d2f5522ff8ea0210f9e98fca76a4b

  • SSDEEP

    6144:YUTyPU1ZPZgNGcXZ6jjplIWrjNwLLQ37z98gWNlPTGQQm6agrd:YOc8ZPWNGcX4jrIWri3QL6NtTird

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      c16519d8852a6a62600ea202eaae5bed_JaffaCakes118

    • Size

      380KB

    • MD5

      c16519d8852a6a62600ea202eaae5bed

    • SHA1

      f3b8e5de4649658f57b7070529dca5421c448fff

    • SHA256

      7c7e97dfdcc13a4cedb21db39e22a41c5c285cd097f875b6216b688f8450fd5a

    • SHA512

      54c40591eb8a37d2eed54ee36955447a121ddce73f906014af45e6d955287ab80eec1136f231b5d7c6544f4234d144de141d2f5522ff8ea0210f9e98fca76a4b

    • SSDEEP

      6144:YUTyPU1ZPZgNGcXZ6jjplIWrjNwLLQ37z98gWNlPTGQQm6agrd:YOc8ZPWNGcX4jrIWri3QL6NtTird

    Score
    7/10
    bootkitdiscoverypersistence

    • Deletes itself

    • Executes dropped EXE

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks