General

  • Target

    50630318b131b0fc5c571899e2017c53_JaffaCakes118

  • Size

    202KB

  • Sample

    241017-c552js1hmj

  • MD5

    50630318b131b0fc5c571899e2017c53

  • SHA1

    1e4d1c6ba8c16dbb7ecd11164391c254669e2390

  • SHA256

    9c07d813f66300267def26c7191718e273618b59465113c375b2216c58f948c2

  • SHA512

    05267dd4adfcf727daf2abdb47384d2b9396d4ed2670838932db869227931f8dce98c1f5b4242de8fed6857dbdb13326066a53df77426940b0c899a4a176f40b

  • SSDEEP

    6144:O0YhjwuTT396HSjGT7UZ5SPzcxt4SpN/Y/n:8hjfTTHBkc4Sx0

Malware Config

Targets

    • Target

      50630318b131b0fc5c571899e2017c53_JaffaCakes118

    • Size

      202KB

    • MD5

      50630318b131b0fc5c571899e2017c53

    • SHA1

      1e4d1c6ba8c16dbb7ecd11164391c254669e2390

    • SHA256

      9c07d813f66300267def26c7191718e273618b59465113c375b2216c58f948c2

    • SHA512

      05267dd4adfcf727daf2abdb47384d2b9396d4ed2670838932db869227931f8dce98c1f5b4242de8fed6857dbdb13326066a53df77426940b0c899a4a176f40b

    • SSDEEP

      6144:O0YhjwuTT396HSjGT7UZ5SPzcxt4SpN/Y/n:8hjfTTHBkc4Sx0

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks