Overview

overview

6

Static

static

5

573ddffd80...18.exe

windows7-x64

6

573ddffd80...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    573ddffd80502b0a8ccd8687d460a0e8_JaffaCakes118

  • Size

    207KB

  • Sample

    241018-nssfgaxelk

  • MD5

    573ddffd80502b0a8ccd8687d460a0e8

  • SHA1

    f4d5ddb28da13fa1d07b52393fc2f592633e550e

  • SHA256

    9aa1b928a7ce1cbfb400d83a3e28fcda49530774029988db815780389ec5a589

  • SHA512

    aa5198f7f655ee30356f47b6ae2dc83eb53e456d459178f934eba527e5ce7a2b1ef2542f4a43e19be5e81eef9913bdf591a654a11fb1b7ad696fe6ad18f84af5

  • SSDEEP

    3072:yZipq+BgM2OWVWE7XGcjN9iZm9GcFP1H5HLOIc1h3SubJ22/3aFIZv1mS3:BpbaeyWECcp9AcFJ5qIUJ2iKAv1

Score
6/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      573ddffd80502b0a8ccd8687d460a0e8_JaffaCakes118

    • Size

      207KB

    • MD5

      573ddffd80502b0a8ccd8687d460a0e8

    • SHA1

      f4d5ddb28da13fa1d07b52393fc2f592633e550e

    • SHA256

      9aa1b928a7ce1cbfb400d83a3e28fcda49530774029988db815780389ec5a589

    • SHA512

      aa5198f7f655ee30356f47b6ae2dc83eb53e456d459178f934eba527e5ce7a2b1ef2542f4a43e19be5e81eef9913bdf591a654a11fb1b7ad696fe6ad18f84af5

    • SSDEEP

      3072:yZipq+BgM2OWVWE7XGcjN9iZm9GcFP1H5HLOIc1h3SubJ22/3aFIZv1mS3:BpbaeyWECcp9AcFJ5qIUJ2iKAv1

    Score
    6/10
    bootkitdiscoverypersistenceupx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks