General
-
Target
5049d4ed36f9b93c8b7d5e0238120146_JaffaCakes118
-
Size
200KB
-
Sample
241017-cmpxlszgqn
-
MD5
5049d4ed36f9b93c8b7d5e0238120146
-
SHA1
199ab58603cce271f714c6cb96513d5f8169b1fc
-
SHA256
b08cbbb9159238d02f18714aa9fcba38a8604a2510b5087252fb5923637ad8f4
-
SHA512
e49cde2d7cfade164ca14b46ab188d6c8922a1c44c75f86035cdcf062d8e07f9472b7fba84a1ad606fafe07e794cee1e8b6151dd4af4e83f82523d710053c7e2
-
SSDEEP
6144:R7oBtDkJ3abnk6cV+EwmAoBNcX2NOkpwCi21gRQnfRPf8aG:R78AqbaVcmAo7cGNpwCi+eQZPf8x
Behavioral task
behavioral1
Sample
5049d4ed36f9b93c8b7d5e0238120146_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5049d4ed36f9b93c8b7d5e0238120146_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
5049d4ed36f9b93c8b7d5e0238120146_JaffaCakes118
-
Size
200KB
-
MD5
5049d4ed36f9b93c8b7d5e0238120146
-
SHA1
199ab58603cce271f714c6cb96513d5f8169b1fc
-
SHA256
b08cbbb9159238d02f18714aa9fcba38a8604a2510b5087252fb5923637ad8f4
-
SHA512
e49cde2d7cfade164ca14b46ab188d6c8922a1c44c75f86035cdcf062d8e07f9472b7fba84a1ad606fafe07e794cee1e8b6151dd4af4e83f82523d710053c7e2
-
SSDEEP
6144:R7oBtDkJ3abnk6cV+EwmAoBNcX2NOkpwCi21gRQnfRPf8aG:R78AqbaVcmAo7cGNpwCi+eQZPf8x
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1