Overview

overview

7

Static

static

7

e17ade0538...18.exe

windows7-x64

7

e17ade0538...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e17ade0538ec032b642576811a2e6768_JaffaCakes118

  • Size

    234KB

  • Sample

    240915-ccfwyszdjj

  • MD5

    e17ade0538ec032b642576811a2e6768

  • SHA1

    177d0178e989a786aab751084cc50c974540b97e

  • SHA256

    1c897ea73f702cd04ec00094095eaa6c8c47f878b71fbbef8df7374033b7be96

  • SHA512

    49a889e58874e2b50e6de71c9def0cec8ce6be1801ef3d7877300d0ba4fd4e2acfa6f7366f554ed9ceedae49fff38cf6ad289c79c795d4e224884126228066bc

  • SSDEEP

    6144:JhDkhsuXLY+3soHseajrmDKhhzaYzsYdBIw58XKzh:LAxY3oHsZjriLGdBIwfh

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      e17ade0538ec032b642576811a2e6768_JaffaCakes118

    • Size

      234KB

    • MD5

      e17ade0538ec032b642576811a2e6768

    • SHA1

      177d0178e989a786aab751084cc50c974540b97e

    • SHA256

      1c897ea73f702cd04ec00094095eaa6c8c47f878b71fbbef8df7374033b7be96

    • SHA512

      49a889e58874e2b50e6de71c9def0cec8ce6be1801ef3d7877300d0ba4fd4e2acfa6f7366f554ed9ceedae49fff38cf6ad289c79c795d4e224884126228066bc

    • SSDEEP

      6144:JhDkhsuXLY+3soHseajrmDKhhzaYzsYdBIw58XKzh:LAxY3oHsZjriLGdBIwfh

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks