General

  • Target

    4a7eb850f3c69ed3968eee8a12c25de8_JaffaCakes118

  • Size

    1.4MB

  • Sample

    241015-3jk3cssfmf

  • MD5

    4a7eb850f3c69ed3968eee8a12c25de8

  • SHA1

    6c52b479b0d6a3bdaf7d3872c58014b21bda94fa

  • SHA256

    9505d7744be75ec3b2226f8e2b46bde83f975480ef599584dbcff94e2fa2d837

  • SHA512

    de8ffe1ef368d2414bef4176851ac162c22996e9f8edb13e922520d78eb7ee02161f2d327e598b6dce55b1b0e2043b3f98b0447229c9c317e2e2ac46479a4867

  • SSDEEP

    24576:quQTQALVtguzmcpv1F+SPzPGwbE0Uu2vxauO39q95vRKiFeTw6WY5YtIb3XaAG:qhTdbtacp/xHyvUuy9qn0iGxWY5YIM

Malware Config

Targets

    • Target

      4a7eb850f3c69ed3968eee8a12c25de8_JaffaCakes118

    • Size

      1.4MB

    • MD5

      4a7eb850f3c69ed3968eee8a12c25de8

    • SHA1

      6c52b479b0d6a3bdaf7d3872c58014b21bda94fa

    • SHA256

      9505d7744be75ec3b2226f8e2b46bde83f975480ef599584dbcff94e2fa2d837

    • SHA512

      de8ffe1ef368d2414bef4176851ac162c22996e9f8edb13e922520d78eb7ee02161f2d327e598b6dce55b1b0e2043b3f98b0447229c9c317e2e2ac46479a4867

    • SSDEEP

      24576:quQTQALVtguzmcpv1F+SPzPGwbE0Uu2vxauO39q95vRKiFeTw6WY5YtIb3XaAG:qhTdbtacp/xHyvUuy9qn0iGxWY5YIM

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks