Overview

overview

6

Static

static

3

d17e6a960d...18.dll

windows7-x64

6

d17e6a960d...18.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d17e6a960d04dfdfaf0d7a836d8e5032_JaffaCakes118

  • Size

    80KB

  • Sample

    240907-kbeaqsthql

  • MD5

    d17e6a960d04dfdfaf0d7a836d8e5032

  • SHA1

    16a083d38d3a601afed66161d3d8bc3f9e3c438a

  • SHA256

    b8ae125787a0e605ff1bacd8355006d18b4299645fc8fee32180198ce9484ef3

  • SHA512

    bec539dfda3b79d120c91be786ec3c9ef7fcf225c48f1730ab194e14abf1472e1044a0e8bbae38c705bd1c0c006e07a618ac898cad4e6e8a564aaf44b4be60eb

  • SSDEEP

    768:ajJpnyutVz6gm+EnXLCour5/I5oooIMHblz0dgolGpWWYQ8hJI0:EFVz6gm+E9ORDolv1RI0

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      d17e6a960d04dfdfaf0d7a836d8e5032_JaffaCakes118

    • Size

      80KB

    • MD5

      d17e6a960d04dfdfaf0d7a836d8e5032

    • SHA1

      16a083d38d3a601afed66161d3d8bc3f9e3c438a

    • SHA256

      b8ae125787a0e605ff1bacd8355006d18b4299645fc8fee32180198ce9484ef3

    • SHA512

      bec539dfda3b79d120c91be786ec3c9ef7fcf225c48f1730ab194e14abf1472e1044a0e8bbae38c705bd1c0c006e07a618ac898cad4e6e8a564aaf44b4be60eb

    • SSDEEP

      768:ajJpnyutVz6gm+EnXLCour5/I5oooIMHblz0dgolGpWWYQ8hJI0:EFVz6gm+E9ORDolv1RI0

    Score
    6/10
    bootkitdiscoverypersistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks