Overview

overview

7

Static

static

7

9103ef9b9b...18.exe

windows7-x64

7

9103ef9b9b...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9103ef9b9b1f4cee3d43a4f100d35018_JaffaCakes118

  • Size

    1.2MB

  • Sample

    241123-2d9yvszmb1

  • MD5

    9103ef9b9b1f4cee3d43a4f100d35018

  • SHA1

    fbaa117c22fb1053abe9234107487ac634b82c82

  • SHA256

    55c1833817a413db9316e07c374df3019bbc2792f0dff16d964f3109512eaed2

  • SHA512

    3b83d680e0c83df07622d37e60640f377436839132a6f304c6379542e48de951099a0287e221614680d66a10518a208c0f1b0957b0261c72c44aa33b8dc81698

  • SSDEEP

    24576:nXWcPsTMuyZZGu0bCUbXVLKN1sowy+Hug45tiEXiBwx:mE4MetbZBWTsjbz45KOx

Score
7/10
aspackv2bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      9103ef9b9b1f4cee3d43a4f100d35018_JaffaCakes118

    • Size

      1.2MB

    • MD5

      9103ef9b9b1f4cee3d43a4f100d35018

    • SHA1

      fbaa117c22fb1053abe9234107487ac634b82c82

    • SHA256

      55c1833817a413db9316e07c374df3019bbc2792f0dff16d964f3109512eaed2

    • SHA512

      3b83d680e0c83df07622d37e60640f377436839132a6f304c6379542e48de951099a0287e221614680d66a10518a208c0f1b0957b0261c72c44aa33b8dc81698

    • SSDEEP

      24576:nXWcPsTMuyZZGu0bCUbXVLKN1sowy+Hug45tiEXiBwx:mE4MetbZBWTsjbz45KOx

    Score
    7/10
    aspackv2bootkitdiscoverypersistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks