Overview

overview

6

Static

static

5

fb7f8418f6...18.exe

windows7-x64

6

fb7f8418f6...18.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    fb7f8418f635a584efa9ca993a1a934a_JaffaCakes118

  • Size

    240KB

  • Sample

    240928-ez4yeaxajj

  • MD5

    fb7f8418f635a584efa9ca993a1a934a

  • SHA1

    42c1cd2efccb8e4c4e2fc51878e4bafff44934a6

  • SHA256

    ead776ef7cb3dee0258e516ccb7e35d71d74af4f4aaabca3928945ae2d2cf1b2

  • SHA512

    89d0516089979012d822e0b7915273c13ab5160d99d46b4c4c58224d922ff17e8dc6c9f740b0e261158445917f1724c5258e318bd57eb88cd414b0024630c1cb

  • SSDEEP

    6144:hMGhFG+/6i7tEuwlpNwBFKs25/AVo7M49d:SGh4nvuw5QQs25/AVojd

Score
6/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      fb7f8418f635a584efa9ca993a1a934a_JaffaCakes118

    • Size

      240KB

    • MD5

      fb7f8418f635a584efa9ca993a1a934a

    • SHA1

      42c1cd2efccb8e4c4e2fc51878e4bafff44934a6

    • SHA256

      ead776ef7cb3dee0258e516ccb7e35d71d74af4f4aaabca3928945ae2d2cf1b2

    • SHA512

      89d0516089979012d822e0b7915273c13ab5160d99d46b4c4c58224d922ff17e8dc6c9f740b0e261158445917f1724c5258e318bd57eb88cd414b0024630c1cb

    • SSDEEP

      6144:hMGhFG+/6i7tEuwlpNwBFKs25/AVo7M49d:SGh4nvuw5QQs25/AVojd

    Score
    6/10
    bootkitdiscoverypersistenceupx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks