Overview

overview

7

Static

static

7

ef60c4eed8...18.exe

windows7-x64

7

ef60c4eed8...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef60c4eed8c853fae261741ab0e574f7_JaffaCakes118

  • Size

    241KB

  • Sample

    240921-jzqs1aselj

  • MD5

    ef60c4eed8c853fae261741ab0e574f7

  • SHA1

    ce70fcd94422405368ab2d4307941f94406e9d6b

  • SHA256

    282973f3dd335537464f3e743d8de4a6e22332b47ea2f53d911218703ea632e5

  • SHA512

    7ac219993445f89620058eade8ac83bcc46dde6858007c78404c7809403f64986678cab0cc9e0d6bb7daaeae7232c1c6d462e83201fc168e14298d64a5b44124

  • SSDEEP

    6144:KkeENDvTSn2SV/GuhYdViC7X57+nM0hOujzWjHW6lNDnV:KNEND/k/GLPX57+nHhl6jZDV

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      ef60c4eed8c853fae261741ab0e574f7_JaffaCakes118

    • Size

      241KB

    • MD5

      ef60c4eed8c853fae261741ab0e574f7

    • SHA1

      ce70fcd94422405368ab2d4307941f94406e9d6b

    • SHA256

      282973f3dd335537464f3e743d8de4a6e22332b47ea2f53d911218703ea632e5

    • SHA512

      7ac219993445f89620058eade8ac83bcc46dde6858007c78404c7809403f64986678cab0cc9e0d6bb7daaeae7232c1c6d462e83201fc168e14298d64a5b44124

    • SSDEEP

      6144:KkeENDvTSn2SV/GuhYdViC7X57+nM0hOujzWjHW6lNDnV:KNEND/k/GLPX57+nHhl6jZDV

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks