Overview

overview

7

Static

static

5

25549a6240...18.exe

windows7-x64

7

25549a6240...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    25549a624034a7254789cc086109f16a_JaffaCakes118

  • Size

    43KB

  • Sample

    241008-zqvctszblg

  • MD5

    25549a624034a7254789cc086109f16a

  • SHA1

    aa03ef5578dacb7e638d5d2c875b5eff9967173c

  • SHA256

    e9c891d82d8478d9262a35c91667479e6249a6058d3aa9fa5c21e86a1960f162

  • SHA512

    fc98eca5cf4e8d3817abfcf201136717a16e40a946aaa191aabd2c15354de7e4bb13274423f64e265e95880d4ddcbf47ba6bb2f969a925f377928bb986d38feb

  • SSDEEP

    768:tOUGKZRQ7v8VIs7F7SkK2b6Sxyim+n1NZ27Bt/UpAFD2mS5sxXWXb:t+KZRQb8ZSudpp16tGpIIsxXWXb

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      25549a624034a7254789cc086109f16a_JaffaCakes118

    • Size

      43KB

    • MD5

      25549a624034a7254789cc086109f16a

    • SHA1

      aa03ef5578dacb7e638d5d2c875b5eff9967173c

    • SHA256

      e9c891d82d8478d9262a35c91667479e6249a6058d3aa9fa5c21e86a1960f162

    • SHA512

      fc98eca5cf4e8d3817abfcf201136717a16e40a946aaa191aabd2c15354de7e4bb13274423f64e265e95880d4ddcbf47ba6bb2f969a925f377928bb986d38feb

    • SSDEEP

      768:tOUGKZRQ7v8VIs7F7SkK2b6Sxyim+n1NZ27Bt/UpAFD2mS5sxXWXb:t+KZRQb8ZSudpp16tGpIIsxXWXb

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • Executes dropped EXE

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks