Overview

overview

6

Static

static

3

d4bec30a06...18.exe

windows7-x64

6

d4bec30a06...18.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    d4bec30a06da3a7dedc0a2cafd6106e8_JaffaCakes118

  • Size

    727KB

  • Sample

    240908-tky6yavenn

  • MD5

    d4bec30a06da3a7dedc0a2cafd6106e8

  • SHA1

    893e043d5c85670361b1c93495d5a49166115bb3

  • SHA256

    555607c0857428ebde6b5113e1c20afe2fd7246b0716b555522c4c59b0272cf7

  • SHA512

    2c5fd443a4500e1f88ab232ce5ec65642709c66dca537dbd6dd940b11c38047e6b46c2059c2474862eb75026f5156f2c759d19789e8c4dc5c62e1a1fa8136212

  • SSDEEP

    12288:rwECaUglPnFsk7P0UahDyDT19BRXjIjp/eo9vOJFpVrp7:rwEC70qkgUahDuzRvo9GjPrp7

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      d4bec30a06da3a7dedc0a2cafd6106e8_JaffaCakes118

    • Size

      727KB

    • MD5

      d4bec30a06da3a7dedc0a2cafd6106e8

    • SHA1

      893e043d5c85670361b1c93495d5a49166115bb3

    • SHA256

      555607c0857428ebde6b5113e1c20afe2fd7246b0716b555522c4c59b0272cf7

    • SHA512

      2c5fd443a4500e1f88ab232ce5ec65642709c66dca537dbd6dd940b11c38047e6b46c2059c2474862eb75026f5156f2c759d19789e8c4dc5c62e1a1fa8136212

    • SSDEEP

      12288:rwECaUglPnFsk7P0UahDyDT19BRXjIjp/eo9vOJFpVrp7:rwEC70qkgUahDuzRvo9GjPrp7

    Score
    6/10
    bootkitdiscoverypersistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks