Overview

overview

6

Static

static

5

917c9f4c08...18.exe

windows7-x64

6

917c9f4c08...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    917c9f4c088c17bfad6a243699a84354_JaffaCakes118

  • Size

    316KB

  • Sample

    241124-ajgeystpgw

  • MD5

    917c9f4c088c17bfad6a243699a84354

  • SHA1

    65e9df50c7168092c1af35e0ef7742b17c40586f

  • SHA256

    b2f3e227e150b98535939db299edf2d31c875d5f001d4c1ce3df609fd67e5497

  • SHA512

    42dd9650f6e75f5bc25b25b3d34a38696a4abd146115c1695c84be9fec075fcfd32939286d7ac1d7ba09681d4710e25cf81199c923079de722ad29e1e2265f70

  • SSDEEP

    6144:zJiMpm+TDRlPswEvuB5xJRCSIVnuewQ7hpyL/YllU99MYc7bF771+YqYC0:z42vRlPsBvmxzC/GQVpAYQ96Yc7bp7E2

Score
6/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      917c9f4c088c17bfad6a243699a84354_JaffaCakes118

    • Size

      316KB

    • MD5

      917c9f4c088c17bfad6a243699a84354

    • SHA1

      65e9df50c7168092c1af35e0ef7742b17c40586f

    • SHA256

      b2f3e227e150b98535939db299edf2d31c875d5f001d4c1ce3df609fd67e5497

    • SHA512

      42dd9650f6e75f5bc25b25b3d34a38696a4abd146115c1695c84be9fec075fcfd32939286d7ac1d7ba09681d4710e25cf81199c923079de722ad29e1e2265f70

    • SSDEEP

      6144:zJiMpm+TDRlPswEvuB5xJRCSIVnuewQ7hpyL/YllU99MYc7bF771+YqYC0:z42vRlPsBvmxzC/GQVpAYQ96Yc7bp7E2

    Score
    6/10
    bootkitdiscoverypersistenceupx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks