General
-
Target
293c7edac5f95d80a4d44c8916f1ab4e_JaffaCakes118
-
Size
205KB
-
Sample
241009-czv96avdjl
-
MD5
293c7edac5f95d80a4d44c8916f1ab4e
-
SHA1
b6d4557120a60fa750295669230df7839da53d74
-
SHA256
3b3d92369fe4299ba9b363621a5ab6f13c0a1aa0cc3d9e5febac6679b70ae485
-
SHA512
318eb95a93c0e53993ab604a9b735dd777d44e87abf89a3061ce1905797800ce8f55928f562c4fb8bcd2cf40f707a52e3a8d80432e5d78390e604afa92b56514
-
SSDEEP
6144:B0yXtBZbJGMwZdH96WSREd+Y/acdBZBAWJeizBR:B0y9Bu3d9mEQY/rL4OR
Behavioral task
behavioral1
Sample
293c7edac5f95d80a4d44c8916f1ab4e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
293c7edac5f95d80a4d44c8916f1ab4e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
293c7edac5f95d80a4d44c8916f1ab4e_JaffaCakes118
-
Size
205KB
-
MD5
293c7edac5f95d80a4d44c8916f1ab4e
-
SHA1
b6d4557120a60fa750295669230df7839da53d74
-
SHA256
3b3d92369fe4299ba9b363621a5ab6f13c0a1aa0cc3d9e5febac6679b70ae485
-
SHA512
318eb95a93c0e53993ab604a9b735dd777d44e87abf89a3061ce1905797800ce8f55928f562c4fb8bcd2cf40f707a52e3a8d80432e5d78390e604afa92b56514
-
SSDEEP
6144:B0yXtBZbJGMwZdH96WSREd+Y/acdBZBAWJeizBR:B0y9Bu3d9mEQY/rL4OR
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1