Overview

overview

6

Static

static

3

dc506df5f4...18.dll

windows7-x64

6

dc506df5f4...18.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc506df5f4e70db1043a258d3210da90_JaffaCakes118

  • Size

    70KB

  • Sample

    240912-p2wd6awamj

  • MD5

    dc506df5f4e70db1043a258d3210da90

  • SHA1

    56a2f13de8369b5051e114a8447d6ea91e6ff565

  • SHA256

    05f7ea02bb0d4b05db46363aa56d44619f9d5f19e0ecc2cdd42c2aa2c0804ffb

  • SHA512

    a1cfc93bc7e20011fcadd7a8edf29480fa65c862be0448bff4b0d6c868fea1657463f09799adfd70cb9801f8bbffceae8799e5a8f84b115bbdac582382050418

  • SSDEEP

    1536:XeiY1SUYfvjYkJzik3TOaAttyKkB40Oh+nfJh0:XeiaVSvb573TOaAttyKiOh+8

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      dc506df5f4e70db1043a258d3210da90_JaffaCakes118

    • Size

      70KB

    • MD5

      dc506df5f4e70db1043a258d3210da90

    • SHA1

      56a2f13de8369b5051e114a8447d6ea91e6ff565

    • SHA256

      05f7ea02bb0d4b05db46363aa56d44619f9d5f19e0ecc2cdd42c2aa2c0804ffb

    • SHA512

      a1cfc93bc7e20011fcadd7a8edf29480fa65c862be0448bff4b0d6c868fea1657463f09799adfd70cb9801f8bbffceae8799e5a8f84b115bbdac582382050418

    • SSDEEP

      1536:XeiY1SUYfvjYkJzik3TOaAttyKkB40Oh+nfJh0:XeiaVSvb573TOaAttyKiOh+8

    Score
    6/10
    bootkitdiscoverypersistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks