Overview

overview

7

Static

static

3

015669113f...18.exe

windows7-x64

7

015669113f...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    015669113f4cd43538b6ebae14aed713_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240930-pq5tfszckg

  • MD5

    015669113f4cd43538b6ebae14aed713

  • SHA1

    d9229da5e1d349bbdea0f59338f3aa51b6ed4c9c

  • SHA256

    12d7c3950d7cc14a258aa625f547cb911037ff1f1108859f3dc81bd9952f9624

  • SHA512

    e71f75d96fc41838e7ff33f97c5f2e27bfd45e5fe4abda5f600ea07f0bee9ed48b8d7639f1d43d769d931ad502ec1a4e064d86beb512335e9c74eb20c31c8306

  • SSDEEP

    24576:X4JH/TYq8ppSkhB4q/yOvAZLDwPc25AFB3KWS/hdkAkiOippg+YiV:X4JH8Bn6pZLiZ54aWQhdkAkipWeV

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      015669113f4cd43538b6ebae14aed713_JaffaCakes118

    • Size

      1.4MB

    • MD5

      015669113f4cd43538b6ebae14aed713

    • SHA1

      d9229da5e1d349bbdea0f59338f3aa51b6ed4c9c

    • SHA256

      12d7c3950d7cc14a258aa625f547cb911037ff1f1108859f3dc81bd9952f9624

    • SHA512

      e71f75d96fc41838e7ff33f97c5f2e27bfd45e5fe4abda5f600ea07f0bee9ed48b8d7639f1d43d769d931ad502ec1a4e064d86beb512335e9c74eb20c31c8306

    • SSDEEP

      24576:X4JH/TYq8ppSkhB4q/yOvAZLDwPc25AFB3KWS/hdkAkiOippg+YiV:X4JH8Bn6pZLiZ54aWQhdkAkipWeV

    Score
    7/10
    bootkitdiscoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks