Overview

overview

7

Static

static

7

d099e81a6e...18.exe

windows7-x64

7

d099e81a6e...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d099e81a6efe139b0de40b251efdacc8_JaffaCakes118

  • Size

    541KB

  • Sample

    240906-2wtdtssbjk

  • MD5

    d099e81a6efe139b0de40b251efdacc8

  • SHA1

    793e99840da64309d5d788140410e65f07bac4a7

  • SHA256

    34ddaa79ca91dcd9a8197d75c866602cd770960a6289c50678cbf00d57b8c172

  • SHA512

    61f6e1281c0e15a6edd69694b34a8fb767dad83389acf552c994b49550596dc3dea713ca6acfdc44b7bc7d5d5d733ee0df2abb9f186ee6215489556ec849e00d

  • SSDEEP

    12288:RdrajxZ5awl7DW/HgoWHBXhZLqh0nUHtCTE8:Ra7DWIXGhCUH6E8

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      d099e81a6efe139b0de40b251efdacc8_JaffaCakes118

    • Size

      541KB

    • MD5

      d099e81a6efe139b0de40b251efdacc8

    • SHA1

      793e99840da64309d5d788140410e65f07bac4a7

    • SHA256

      34ddaa79ca91dcd9a8197d75c866602cd770960a6289c50678cbf00d57b8c172

    • SHA512

      61f6e1281c0e15a6edd69694b34a8fb767dad83389acf552c994b49550596dc3dea713ca6acfdc44b7bc7d5d5d733ee0df2abb9f186ee6215489556ec849e00d

    • SSDEEP

      12288:RdrajxZ5awl7DW/HgoWHBXhZLqh0nUHtCTE8:Ra7DWIXGhCUH6E8

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks