Overview

overview

7

Static

static

7

d70fa2b715...18.exe

windows7-x64

7

d70fa2b715...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d70fa2b71542b9f7e7a744d46c14ef07_JaffaCakes118

  • Size

    205KB

  • Sample

    240909-zg1hgs1crb

  • MD5

    d70fa2b71542b9f7e7a744d46c14ef07

  • SHA1

    52c80dbf178b6a5d33b4758e3468e86003f5beff

  • SHA256

    5e5846264e91fe849d2e3f973558cd3f661fe7a259f2eb1f91d484ee310b19b1

  • SHA512

    441fbe198bacd773f443c80c6789ebe25b07bf5e37daefdfc875806ced91fedea5ab5788a616f89a16424b0fd695373b1c583d3634b90a3e138a0afa270f82b3

  • SSDEEP

    6144:hqWSmaBkiDmJoILdGyo7/IyHjZQFhJ5jmG:hqMIkiiJoadGVDZOqG

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      d70fa2b71542b9f7e7a744d46c14ef07_JaffaCakes118

    • Size

      205KB

    • MD5

      d70fa2b71542b9f7e7a744d46c14ef07

    • SHA1

      52c80dbf178b6a5d33b4758e3468e86003f5beff

    • SHA256

      5e5846264e91fe849d2e3f973558cd3f661fe7a259f2eb1f91d484ee310b19b1

    • SHA512

      441fbe198bacd773f443c80c6789ebe25b07bf5e37daefdfc875806ced91fedea5ab5788a616f89a16424b0fd695373b1c583d3634b90a3e138a0afa270f82b3

    • SSDEEP

      6144:hqWSmaBkiDmJoILdGyo7/IyHjZQFhJ5jmG:hqMIkiiJoadGVDZOqG

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks