Overview

overview

6

Static

static

5

07aa9aa936...18.exe

windows7-x64

6

07aa9aa936...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    07aa9aa936166ab325a14d00e1b62ab7_JaffaCakes118

  • Size

    221KB

  • Sample

    241001-2bfl8sxcld

  • MD5

    07aa9aa936166ab325a14d00e1b62ab7

  • SHA1

    a9ebde272a8f657b2daf9a230d52da5a042cf099

  • SHA256

    f7610ccc770d8919c4f9547b52c8cd6e12e675eb4c50675622788f7f452133da

  • SHA512

    b3888ec2b2a572578371051c6ad08a72e90abb0864c8425184e72e0db0986cb417a6ad49d81586bc8bf6e37d829e23f9b320c30663e47618818753540652173a

  • SSDEEP

    6144:Kn26SGFz0EMXqnYkG76TEMw3AcrbnsAse7EvEdQCD:KjSc0/Xgo2TEMsrLBb7EvK/D

Score
6/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      07aa9aa936166ab325a14d00e1b62ab7_JaffaCakes118

    • Size

      221KB

    • MD5

      07aa9aa936166ab325a14d00e1b62ab7

    • SHA1

      a9ebde272a8f657b2daf9a230d52da5a042cf099

    • SHA256

      f7610ccc770d8919c4f9547b52c8cd6e12e675eb4c50675622788f7f452133da

    • SHA512

      b3888ec2b2a572578371051c6ad08a72e90abb0864c8425184e72e0db0986cb417a6ad49d81586bc8bf6e37d829e23f9b320c30663e47618818753540652173a

    • SSDEEP

      6144:Kn26SGFz0EMXqnYkG76TEMw3AcrbnsAse7EvEdQCD:KjSc0/Xgo2TEMsrLBb7EvK/D

    Score
    6/10
    bootkitdiscoverypersistenceupx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks