General

  • Target

    4e8c3479723839f051dbf78c65414831_JaffaCakes118

  • Size

    338KB

  • Sample

    241016-xwtblsxblh

  • MD5

    4e8c3479723839f051dbf78c65414831

  • SHA1

    3bcfd803fedd32d807e647ff24be812a5e81a822

  • SHA256

    be4717b78469688523a4be02601f58a0af5f594db10f202e755e026309de6d58

  • SHA512

    db46e8ac5a980238a98125a424d7fe20bb8920f1dfdafab66a2a04c2ee3eed247eeae60813fcb12354d9b5d361e3856cedd50b9929e965c8d09caea21eab811a

  • SSDEEP

    6144:NA5wVdCy6wrbDY0rDqTWC4zEDzKuTrSbxc97cl2UHAKmObOqP1n9c7JdxVQpgG/P:Njyy64VrDqTWIzW+9YQZ5O/P7c7Jd7Ej

Malware Config

Targets

    • Target

      4e8c3479723839f051dbf78c65414831_JaffaCakes118

    • Size

      338KB

    • MD5

      4e8c3479723839f051dbf78c65414831

    • SHA1

      3bcfd803fedd32d807e647ff24be812a5e81a822

    • SHA256

      be4717b78469688523a4be02601f58a0af5f594db10f202e755e026309de6d58

    • SHA512

      db46e8ac5a980238a98125a424d7fe20bb8920f1dfdafab66a2a04c2ee3eed247eeae60813fcb12354d9b5d361e3856cedd50b9929e965c8d09caea21eab811a

    • SSDEEP

      6144:NA5wVdCy6wrbDY0rDqTWC4zEDzKuTrSbxc97cl2UHAKmObOqP1n9c7JdxVQpgG/P:Njyy64VrDqTWIzW+9YQZ5O/P7c7Jd7Ej

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks