Overview

overview

7

Static

static

3

fb9b25f22d...18.exe

windows7-x64

7

fb9b25f22d...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fb9b25f22d74c49ef967cef69922bb64_JaffaCakes118

  • Size

    821KB

  • Sample

    240928-gahd8azarp

  • MD5

    fb9b25f22d74c49ef967cef69922bb64

  • SHA1

    f5cde998532c98a6ba5bfd655203b5b2e6ecf46e

  • SHA256

    962a1439e89501a8df3e015cdf18321078a2015559d5e54c725df18b457eef64

  • SHA512

    19a816dea86a6f182943c3dd557ac75bb1862ff7b461d0ddc767588b3a07fa3b7ad2ecafb6217dacd7fb43ad1f2eb98a8f4d61e32cdeac69e07fbcaba921fe6d

  • SSDEEP

    24576:37JyD0grYaRxs0eJhkrRrkye/cf4QHQmXrVTzO:3UDzfMXq6/ijwmbo

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      fb9b25f22d74c49ef967cef69922bb64_JaffaCakes118

    • Size

      821KB

    • MD5

      fb9b25f22d74c49ef967cef69922bb64

    • SHA1

      f5cde998532c98a6ba5bfd655203b5b2e6ecf46e

    • SHA256

      962a1439e89501a8df3e015cdf18321078a2015559d5e54c725df18b457eef64

    • SHA512

      19a816dea86a6f182943c3dd557ac75bb1862ff7b461d0ddc767588b3a07fa3b7ad2ecafb6217dacd7fb43ad1f2eb98a8f4d61e32cdeac69e07fbcaba921fe6d

    • SSDEEP

      24576:37JyD0grYaRxs0eJhkrRrkye/cf4QHQmXrVTzO:3UDzfMXq6/ijwmbo

    Score
    7/10
    bootkitdiscoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks