General
-
Target
49e5503598578426fe1008a4b05f9379_JaffaCakes118
-
Size
218KB
-
Sample
241015-zfbgzazeql
-
MD5
49e5503598578426fe1008a4b05f9379
-
SHA1
518fa43a81395ffe25061c64523b6d7394843a75
-
SHA256
e895e01c130601ed7be3855a285d9a02d92ce0f8f83f699101c1a053451b2ba5
-
SHA512
b90b5641eac96b97455dad164baf07429746ce32ee62590bff821358b5150d14e9de37e0bc8d709812f353aba828409aadbd34b3e3bcdf2a14a0160be01ebe39
-
SSDEEP
6144:VgTJ3/KOk2ttdLEzNMCGDFBEyNpO5pxvaBWrPF:e1CdjzWCGxBHNo5pNIQN
Behavioral task
behavioral1
Sample
49e5503598578426fe1008a4b05f9379_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
49e5503598578426fe1008a4b05f9379_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
49e5503598578426fe1008a4b05f9379_JaffaCakes118
-
Size
218KB
-
MD5
49e5503598578426fe1008a4b05f9379
-
SHA1
518fa43a81395ffe25061c64523b6d7394843a75
-
SHA256
e895e01c130601ed7be3855a285d9a02d92ce0f8f83f699101c1a053451b2ba5
-
SHA512
b90b5641eac96b97455dad164baf07429746ce32ee62590bff821358b5150d14e9de37e0bc8d709812f353aba828409aadbd34b3e3bcdf2a14a0160be01ebe39
-
SSDEEP
6144:VgTJ3/KOk2ttdLEzNMCGDFBEyNpO5pxvaBWrPF:e1CdjzWCGxBHNo5pNIQN
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1