Overview

overview

7

Static

static

7

9ebc485bce...18.exe

windows7-x64

7

9ebc485bce...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ebc485bce1398a6040aef3744757167_JaffaCakes118

  • Size

    375KB

  • Sample

    241126-aj15cszrhj

  • MD5

    9ebc485bce1398a6040aef3744757167

  • SHA1

    acd1a3b61a0f3119a7fbc96c7a094c2d23f57440

  • SHA256

    c92e401ecc92529ff3dc397a515cdf1d0804f22745fd8c482b73dc4ebad0f43d

  • SHA512

    cef04cedba177c3dfdc4695a9a582fe95517957bfa55a21f17c3518074478351401880cc338a14e0512996c78dfa5b31a58fbe7e4ceb414da3ba71c528fb32ae

  • SSDEEP

    6144:xZ3aLmcqJeNrSzb5vGpAjfj5aoaJkWsrB6Nj6jaxQRbjG80wpS+sBIW:xi7qUpCb5eCfoo6nR6uUNS+

Score
7/10
aspackv2bootkitdefense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      9ebc485bce1398a6040aef3744757167_JaffaCakes118

    • Size

      375KB

    • MD5

      9ebc485bce1398a6040aef3744757167

    • SHA1

      acd1a3b61a0f3119a7fbc96c7a094c2d23f57440

    • SHA256

      c92e401ecc92529ff3dc397a515cdf1d0804f22745fd8c482b73dc4ebad0f43d

    • SHA512

      cef04cedba177c3dfdc4695a9a582fe95517957bfa55a21f17c3518074478351401880cc338a14e0512996c78dfa5b31a58fbe7e4ceb414da3ba71c528fb32ae

    • SSDEEP

      6144:xZ3aLmcqJeNrSzb5vGpAjfj5aoaJkWsrB6Nj6jaxQRbjG80wpS+sBIW:xi7qUpCb5eCfoo6nR6uUNS+

    Score
    7/10
    bootkitdefense_evasiondiscoverypersistence

    • Deletes itself

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks