Analysis
-
max time kernel
78s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
15/09/2024, 09:47
Static task
static1
Behavioral task
behavioral1
Sample
e2331666b5100ee2f1ecdd02fbaece10_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e2331666b5100ee2f1ecdd02fbaece10_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
e2331666b5100ee2f1ecdd02fbaece10_JaffaCakes118.exe
-
Size
132KB
-
MD5
e2331666b5100ee2f1ecdd02fbaece10
-
SHA1
8f8bbc9150b732a378e44980fa2bc2bbd87ec70c
-
SHA256
d3cdc591efb82cc38574422dca5a46702656f7c8282bfe1a3d989c93003ce7b4
-
SHA512
313da5b597c940cd4c7782a745a08c2426810c40502bbdf0b8eb83e779f8abc1d2413e9a171ef738f3484f3a792804d7ac8d21e0d6885ab437ec90c441fe4e99
-
SSDEEP
1536:P5tB5H0a5fFoAmgiEqWcCGlPUCUKQQb8mv8Y+RdMo4dbcZOYgsJBYMfvivlPozdL:/vUaFPmgRMNlPTGQQm6ytwZEsrYkK4
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 e2331666b5100ee2f1ecdd02fbaece10_JaffaCakes118.exe