Overview

overview

6

Static

static

5

b1092ebe95...18.exe

windows7-x64

6

b1092ebe95...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b1092ebe959610d9690999aedeeb61fc_JaffaCakes118

  • Size

    534KB

  • Sample

    241129-nymr6stlh1

  • MD5

    b1092ebe959610d9690999aedeeb61fc

  • SHA1

    c979dd4cfd880d17737eaa6f2328eb010b664761

  • SHA256

    f52b6bad5396d20e6c8cfecd9f245c8f2316892704a495a7a879876511191bec

  • SHA512

    6e48d76b73a61a202a2d3520fab993fba1c2879d07c3a4e8796d33e4eec469b74034dc2a76685256d0ac2f9513731d505cd3f5564636161390f39da199f2ebf0

  • SSDEEP

    12288:2urx5lZb/EetEmLlfeNcUhs18pnFHCNdJT:2AnFonhs1unF8

Score
6/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      b1092ebe959610d9690999aedeeb61fc_JaffaCakes118

    • Size

      534KB

    • MD5

      b1092ebe959610d9690999aedeeb61fc

    • SHA1

      c979dd4cfd880d17737eaa6f2328eb010b664761

    • SHA256

      f52b6bad5396d20e6c8cfecd9f245c8f2316892704a495a7a879876511191bec

    • SHA512

      6e48d76b73a61a202a2d3520fab993fba1c2879d07c3a4e8796d33e4eec469b74034dc2a76685256d0ac2f9513731d505cd3f5564636161390f39da199f2ebf0

    • SSDEEP

      12288:2urx5lZb/EetEmLlfeNcUhs18pnFHCNdJT:2AnFonhs1unF8

    Score
    6/10
    bootkitdiscoverypersistenceupx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks