Overview

overview

6

Static

static

3

fb8dc90880...18.exe

windows7-x64

6

fb8dc90880...18.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    fb8dc908808ae1db412c5e64e2cf0e8f_JaffaCakes118

  • Size

    502KB

  • Sample

    240928-fm9hssyarm

  • MD5

    fb8dc908808ae1db412c5e64e2cf0e8f

  • SHA1

    4fc8689c9dfb5e59c24decfa72e5c0077b463d36

  • SHA256

    bedf090cd15d6e94f1a8165d946b6bbfab603945c71ae0199c48fd096c3c3d45

  • SHA512

    17554db3380a49c7303bfdd7eef04ea8ca71583129bace8ab8f6ed917d11be3306d960d4240eca350f6c19e7cfb2efea01202b230d03c809a54873a5151b6dff

  • SSDEEP

    12288:ivAXPvlnrnZU1+yLMZNtYmlSjAbte26UIAym7imO:5nZU1+yLMXAApedUfZWmO

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      fb8dc908808ae1db412c5e64e2cf0e8f_JaffaCakes118

    • Size

      502KB

    • MD5

      fb8dc908808ae1db412c5e64e2cf0e8f

    • SHA1

      4fc8689c9dfb5e59c24decfa72e5c0077b463d36

    • SHA256

      bedf090cd15d6e94f1a8165d946b6bbfab603945c71ae0199c48fd096c3c3d45

    • SHA512

      17554db3380a49c7303bfdd7eef04ea8ca71583129bace8ab8f6ed917d11be3306d960d4240eca350f6c19e7cfb2efea01202b230d03c809a54873a5151b6dff

    • SSDEEP

      12288:ivAXPvlnrnZU1+yLMZNtYmlSjAbte26UIAym7imO:5nZU1+yLMXAApedUfZWmO

    Score
    6/10
    bootkitdiscoverypersistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks