Overview

overview

6

Static

static

3

826fde05cb...18.exe

windows7-x64

6

826fde05cb...18.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    826fde05cb1e4c08cee74c1acf31f2ca_JaffaCakes118

  • Size

    306KB

  • Sample

    241031-j9nfmavckc

  • MD5

    826fde05cb1e4c08cee74c1acf31f2ca

  • SHA1

    9a270b302671f76330bc0339f8807dee55e6510d

  • SHA256

    ac86ac215d31812bd7754f9d4820e4982b7d79b054d9456afa615f7babe724ae

  • SHA512

    37b8b2981e3d4c097f8fa12185e91aa6fbc1390c080199efe46ba769e4542fdfbd9969025c89663206e9a05e16ea793d476299e3e45b5b1d4bb8a1b21864e267

  • SSDEEP

    6144:UCh7cuD4dq17Rj0JkqCc4JTA/0nVW5GJZ2tNYLj8MfsN3/mbXjSO3Gn:Uk7l4UxRj2v0TA/MVzYKj86sN3ubX2b

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      826fde05cb1e4c08cee74c1acf31f2ca_JaffaCakes118

    • Size

      306KB

    • MD5

      826fde05cb1e4c08cee74c1acf31f2ca

    • SHA1

      9a270b302671f76330bc0339f8807dee55e6510d

    • SHA256

      ac86ac215d31812bd7754f9d4820e4982b7d79b054d9456afa615f7babe724ae

    • SHA512

      37b8b2981e3d4c097f8fa12185e91aa6fbc1390c080199efe46ba769e4542fdfbd9969025c89663206e9a05e16ea793d476299e3e45b5b1d4bb8a1b21864e267

    • SSDEEP

      6144:UCh7cuD4dq17Rj0JkqCc4JTA/0nVW5GJZ2tNYLj8MfsN3/mbXjSO3Gn:Uk7l4UxRj2v0TA/MVzYKj86sN3ubX2b

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks