Overview

overview

6

Static

static

3

c8e3da5c7a...18.exe

windows7-x64

3

c8e3da5c7a...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8e3da5c7a97d5443f88d857649845e3_JaffaCakes118

  • Size

    14KB

  • Sample

    240829-qja6yavgrp

  • MD5

    c8e3da5c7a97d5443f88d857649845e3

  • SHA1

    8c30dfeb9b91ec423505de50cf83f35f6323452f

  • SHA256

    9167e58576ecb7da6be45fcefc3e0b91fecbe4ef7dbe871d83659bc73d8bf078

  • SHA512

    7a99282f708d0f8c29920c610df6127480ce14e1e42e2f728d90081187b7d63b9b7ee86ffbe70a8fdc0ba5fb97a47b95af003295ae5d435bbbba4fa35a0d15f2

  • SSDEEP

    384:dFp2cMIA8YcwzZeoth64VUq5iqKEguz28:dTvA8YcwegVU1sT28

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      c8e3da5c7a97d5443f88d857649845e3_JaffaCakes118

    • Size

      14KB

    • MD5

      c8e3da5c7a97d5443f88d857649845e3

    • SHA1

      8c30dfeb9b91ec423505de50cf83f35f6323452f

    • SHA256

      9167e58576ecb7da6be45fcefc3e0b91fecbe4ef7dbe871d83659bc73d8bf078

    • SHA512

      7a99282f708d0f8c29920c610df6127480ce14e1e42e2f728d90081187b7d63b9b7ee86ffbe70a8fdc0ba5fb97a47b95af003295ae5d435bbbba4fa35a0d15f2

    • SSDEEP

      384:dFp2cMIA8YcwzZeoth64VUq5iqKEguz28:dTvA8YcwegVU1sT28

    Score
    6/10
    discoverybootkitpersistence

    • Adds Run key to start application

      persistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks