Overview

overview

7

Static

static

7

e23adc2cb2...18.exe

windows7-x64

7

e23adc2cb2...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e23adc2cb2850959a0b1e201ec562632_JaffaCakes118

  • Size

    305KB

  • Sample

    240915-l494jsyaje

  • MD5

    e23adc2cb2850959a0b1e201ec562632

  • SHA1

    89b94cb2e4a9b9ac52003344c57e29a8f1f8cb3c

  • SHA256

    a2176bc9875166a656e18e3afdc3dd260f6501c349d127f3109fb35ac103ca95

  • SHA512

    f1e2562836bdbd25261e18e8f615133c248d0fb68b676ecfcd395e11fb9808b8eede3e52e8be27e33b3bccd9e084ede557b9b609752b54f8e6bf066ab2ba420d

  • SSDEEP

    6144:KvOBo+b95SQg9T4Cn+jjEJM+yAZeHf2bP6ZIKqrUDkZAD1NF:X7kQg9chj4JM0Ze/4PyMwDwAN

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      e23adc2cb2850959a0b1e201ec562632_JaffaCakes118

    • Size

      305KB

    • MD5

      e23adc2cb2850959a0b1e201ec562632

    • SHA1

      89b94cb2e4a9b9ac52003344c57e29a8f1f8cb3c

    • SHA256

      a2176bc9875166a656e18e3afdc3dd260f6501c349d127f3109fb35ac103ca95

    • SHA512

      f1e2562836bdbd25261e18e8f615133c248d0fb68b676ecfcd395e11fb9808b8eede3e52e8be27e33b3bccd9e084ede557b9b609752b54f8e6bf066ab2ba420d

    • SSDEEP

      6144:KvOBo+b95SQg9T4Cn+jjEJM+yAZeHf2bP6ZIKqrUDkZAD1NF:X7kQg9chj4JM0Ze/4PyMwDwAN

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks