7a1a957ff277ea70e526bf2e7189b68106867f557501be694df0a3d7b56153ce | Triage

Sharing

General

Target

372ca7db77eb38762b4ea264d6e32a12_JaffaCakes118
Size

494KB
Sample

241011-2mx1naxhpf
MD5

372ca7db77eb38762b4ea264d6e32a12
SHA1

c1c6ef1a625e269a4533414470b9d56fd6a85f7c
SHA256

7a1a957ff277ea70e526bf2e7189b68106867f557501be694df0a3d7b56153ce
SHA512

cbf1edfc634e5122a03a0558f35490e7836923dfdaeb51bae1964ca65796270fc28eb1b9f6cd3ccf18a6afe5a877b9a7143880fbd5663df39bbfe746ae674d3e
SSDEEP

12288:cnxCXKO2eAPC7jYvRsCSmFgRjXD6b7MP+Dd2EAr:cnx1eeCov6CS2IjX67MP+h2f

Score

7^/10

aspackv2 bootkit discovery persistence

Malware Config

Targets

- Target
  
  372ca7db77eb38762b4ea264d6e32a12_JaffaCakes118
- Size
  
  494KB
- MD5
  
  372ca7db77eb38762b4ea264d6e32a12
- SHA1
  
  c1c6ef1a625e269a4533414470b9d56fd6a85f7c
- SHA256
  
  7a1a957ff277ea70e526bf2e7189b68106867f557501be694df0a3d7b56153ce
- SHA512
  
  cbf1edfc634e5122a03a0558f35490e7836923dfdaeb51bae1964ca65796270fc28eb1b9f6cd3ccf18a6afe5a877b9a7143880fbd5663df39bbfe746ae674d3e
- SSDEEP
  
  12288:cnxCXKO2eAPC7jYvRsCSmFgRjXD6b7MP+Dd2EAr:cnx1eeCov6CS2IjX67MP+h2f
Score

6^/10

bootkit discovery persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Pre-OS Boot

Bootkit

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitdiscoverypersistence

behavioral2