General
-
Target
4aedccb886b357f3955cf92257e84b91_JaffaCakes118
-
Size
201KB
-
Sample
241016-cea4gs1fjj
-
MD5
4aedccb886b357f3955cf92257e84b91
-
SHA1
70f7f9b832d853df1b79a26bd45de80af4f7744e
-
SHA256
75faeae78c77e0b0be5d2b90389b3d9ed92fb4f4fc0dea38f5c39fe18a1b502b
-
SHA512
3470c3d8f8e9462351995dc5d8e9ae17b065dafb9d29674d8aa45224b4f3391649274622c67e798049b308438b9ddc434edecd616f47bb129ccf1131c18ed07a
-
SSDEEP
6144:hD2JXPXyZe2sgp76QGfHCIjEcqRT++ibBH/:d2J/oEHCIjEP+RbBf
Behavioral task
behavioral1
Sample
4aedccb886b357f3955cf92257e84b91_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4aedccb886b357f3955cf92257e84b91_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
4aedccb886b357f3955cf92257e84b91_JaffaCakes118
-
Size
201KB
-
MD5
4aedccb886b357f3955cf92257e84b91
-
SHA1
70f7f9b832d853df1b79a26bd45de80af4f7744e
-
SHA256
75faeae78c77e0b0be5d2b90389b3d9ed92fb4f4fc0dea38f5c39fe18a1b502b
-
SHA512
3470c3d8f8e9462351995dc5d8e9ae17b065dafb9d29674d8aa45224b4f3391649274622c67e798049b308438b9ddc434edecd616f47bb129ccf1131c18ed07a
-
SSDEEP
6144:hD2JXPXyZe2sgp76QGfHCIjEcqRT++ibBH/:d2J/oEHCIjEP+RbBf
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1