Overview

overview

7

Static

static

7

ea69414156...18.exe

windows7-x64

7

ea69414156...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea694141563637788102add58bf41a9a_JaffaCakes118

  • Size

    307KB

  • Sample

    240919-ctnywswcjd

  • MD5

    ea694141563637788102add58bf41a9a

  • SHA1

    8677e7461c561980d47970fddd1da75f19bc4445

  • SHA256

    3f43c75376c09193308833792f6f860cab53b96cf40b5653d1a76ae355367f88

  • SHA512

    a06a6867ae66ddb832881cbe034523161fc640aac0cd1c1ec293b9f26fd6531401043569a76c83e57bf38405b81eab47343262643543e8e05f155961b9d5d690

  • SSDEEP

    6144:rNKIK84tmzVZMrRhZf4thhG8yXNNoPQCdVGDZ+c/7UMS:m84tmzgrlMhhGhNNoPw1+c/DS

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      ea694141563637788102add58bf41a9a_JaffaCakes118

    • Size

      307KB

    • MD5

      ea694141563637788102add58bf41a9a

    • SHA1

      8677e7461c561980d47970fddd1da75f19bc4445

    • SHA256

      3f43c75376c09193308833792f6f860cab53b96cf40b5653d1a76ae355367f88

    • SHA512

      a06a6867ae66ddb832881cbe034523161fc640aac0cd1c1ec293b9f26fd6531401043569a76c83e57bf38405b81eab47343262643543e8e05f155961b9d5d690

    • SSDEEP

      6144:rNKIK84tmzVZMrRhZf4thhG8yXNNoPQCdVGDZ+c/7UMS:m84tmzgrlMhhGhNNoPw1+c/DS

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks