General

  • Target

    49a01b5f512416613770ffc5c1be94f4_JaffaCakes118

  • Size

    1.4MB

  • Sample

    241015-x89t5asglg

  • MD5

    49a01b5f512416613770ffc5c1be94f4

  • SHA1

    5976eccdd27e15973ca69aa6445249803f4dbef9

  • SHA256

    1243f2ac04ef526898cc61e7b0f456b09378fefe7e6537fef21bf8c66c2b0bb6

  • SHA512

    755b39f97381d2a5c80800084b4455fcf930bc1cba30940c128a4e3dc96c8f8f9229e026a35b12da1a26ca1ec2813d2209b2bd9b518e610ca486d4c4688b7c08

  • SSDEEP

    24576:oSwcnb/8hYhRhPtJD8TTLJw89nfG3OOJEfwdJFM4RJ67c7zj4Id5Wh:l9nL8ahbPLk5TtA3FFRJ6YHj4+5Wh

Malware Config

Targets

    • Target

      49a01b5f512416613770ffc5c1be94f4_JaffaCakes118

    • Size

      1.4MB

    • MD5

      49a01b5f512416613770ffc5c1be94f4

    • SHA1

      5976eccdd27e15973ca69aa6445249803f4dbef9

    • SHA256

      1243f2ac04ef526898cc61e7b0f456b09378fefe7e6537fef21bf8c66c2b0bb6

    • SHA512

      755b39f97381d2a5c80800084b4455fcf930bc1cba30940c128a4e3dc96c8f8f9229e026a35b12da1a26ca1ec2813d2209b2bd9b518e610ca486d4c4688b7c08

    • SSDEEP

      24576:oSwcnb/8hYhRhPtJD8TTLJw89nfG3OOJEfwdJFM4RJ67c7zj4Id5Wh:l9nL8ahbPLk5TtA3FFRJ6YHj4+5Wh

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks