Overview

overview

6

Static

static

3

d5b1d18458...18.exe

windows7-x64

6

d5b1d18458...18.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    d5b1d1845832a5758ef30d84ef85260b_JaffaCakes118

  • Size

    714KB

  • Sample

    240909-fqlwxavhqh

  • MD5

    d5b1d1845832a5758ef30d84ef85260b

  • SHA1

    4c171b8fb73079bfc4eea7f6c2d8056529493263

  • SHA256

    4fe361c61c541ccbb7eb97df50733544ec209ecc37794c08f655bc9f1022c9a5

  • SHA512

    3ab157cd70af56425328133b385be33d16552838cbca8a8652ba3f4c4184e3d3c004a37b46d6943a84ba66edbb976d048dabaf2dea5f39a6d7b4ad430e982bd9

  • SSDEEP

    12288:PsygFeF8v9WtDo3gsEoXYkTPkW/BRXjIjTJ6jYAb:PtnUYtagsEoXY4kIRO6jYo

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      d5b1d1845832a5758ef30d84ef85260b_JaffaCakes118

    • Size

      714KB

    • MD5

      d5b1d1845832a5758ef30d84ef85260b

    • SHA1

      4c171b8fb73079bfc4eea7f6c2d8056529493263

    • SHA256

      4fe361c61c541ccbb7eb97df50733544ec209ecc37794c08f655bc9f1022c9a5

    • SHA512

      3ab157cd70af56425328133b385be33d16552838cbca8a8652ba3f4c4184e3d3c004a37b46d6943a84ba66edbb976d048dabaf2dea5f39a6d7b4ad430e982bd9

    • SSDEEP

      12288:PsygFeF8v9WtDo3gsEoXYkTPkW/BRXjIjTJ6jYAb:PtnUYtagsEoXY4kIRO6jYo

    Score
    6/10
    bootkitdiscoverypersistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks