Overview

overview

7

Static

static

3

eac66dbf67...18.exe

windows7-x64

3

eac66dbf67...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eac66dbf6736f5768ed48f71da21f392_JaffaCakes118

  • Size

    20KB

  • Sample

    240919-hedr9svgpa

  • MD5

    eac66dbf6736f5768ed48f71da21f392

  • SHA1

    6781ea8f567bbd7090c7251e62fb750799f39e39

  • SHA256

    1c8950be7d83f1f3873f823ed0ba54addf10eeb6905303fec87f33e3aa8bc8d1

  • SHA512

    d78b2472774d887c4058cda4c886f72b225a33993e8006821efd17e933a5ceb585ae2f2d5a0663f970efdc871f63ec0a132def02cb5c65917488f622812b0b7d

  • SSDEEP

    384:ShQNm5ogigD0QKMt624t0BQKxqulLqJZfuYmcGB0T+axYC7dRt/peJXFmR:Sh3og9D0QKMtgaPIuOdUXa1pzxeJVmR

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      eac66dbf6736f5768ed48f71da21f392_JaffaCakes118

    • Size

      20KB

    • MD5

      eac66dbf6736f5768ed48f71da21f392

    • SHA1

      6781ea8f567bbd7090c7251e62fb750799f39e39

    • SHA256

      1c8950be7d83f1f3873f823ed0ba54addf10eeb6905303fec87f33e3aa8bc8d1

    • SHA512

      d78b2472774d887c4058cda4c886f72b225a33993e8006821efd17e933a5ceb585ae2f2d5a0663f970efdc871f63ec0a132def02cb5c65917488f622812b0b7d

    • SSDEEP

      384:ShQNm5ogigD0QKMt624t0BQKxqulLqJZfuYmcGB0T+axYC7dRt/peJXFmR:Sh3og9D0QKMtgaPIuOdUXa1pzxeJVmR

    Score
    7/10
    discoverybootkitpersistence

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks