Overview

overview

7

Static

static

7

c9277db085...18.exe

windows7-x64

7

c9277db085...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c9277db0852eebd4d1905dbd041ab0ba_JaffaCakes118

  • Size

    208KB

  • Sample

    240829-tj58vszdlh

  • MD5

    c9277db0852eebd4d1905dbd041ab0ba

  • SHA1

    45e2af9568410727b6427c8c301f87ffe8a65c79

  • SHA256

    1ca05316d7e89159adf7e16c6693b0519428f2e941c768d696f51522c492f9a5

  • SHA512

    70ba176f994e1594441041b1364142696e24958aea3671ebe27a5a4bc9d2570e39f7975dd1b0b5268f74f29dd3b9b5d7a5d150f1823bba5ebfefd5e9162a4770

  • SSDEEP

    6144:OozMw1Zn/OgHRmHwffT39pcJ/TVQ4zZHEai/htb:7n/3vf+xQ4zpBwhtb

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      c9277db0852eebd4d1905dbd041ab0ba_JaffaCakes118

    • Size

      208KB

    • MD5

      c9277db0852eebd4d1905dbd041ab0ba

    • SHA1

      45e2af9568410727b6427c8c301f87ffe8a65c79

    • SHA256

      1ca05316d7e89159adf7e16c6693b0519428f2e941c768d696f51522c492f9a5

    • SHA512

      70ba176f994e1594441041b1364142696e24958aea3671ebe27a5a4bc9d2570e39f7975dd1b0b5268f74f29dd3b9b5d7a5d150f1823bba5ebfefd5e9162a4770

    • SSDEEP

      6144:OozMw1Zn/OgHRmHwffT39pcJ/TVQ4zZHEai/htb:7n/3vf+xQ4zpBwhtb

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks