Overview

overview

6

Static

static

5

JaffaCakes...63.exe

windows7-x64

6

JaffaCakes...63.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_174f745bf6da228f15f896ba2307ba63

  • Size

    321KB

  • Sample

    250222-fafpysynak

  • MD5

    174f745bf6da228f15f896ba2307ba63

  • SHA1

    8c05e49689703cc5acc5239de838b4c3ecd6b4cb

  • SHA256

    15ae266b9c02e77787fa42215f2f6925df8d9f8d48fb36fc644b2c9988048f65

  • SHA512

    f489f49d52f050ac5421de09d677b872c6e3e89eeb131c3a6552bb44b09460afbf8a033a28aeb1352a688d2efcbe1b8226eeeef330bdc67c55cfb197bbcc7a2a

  • SSDEEP

    6144:PDQKrk2BsM4e3JUkxJK7Llkc8QxqPOXZJfPbtBcwwnTVESEzBfH:rLk2B74e3JU3Lua2OpVZBMTVESeH

Score
6/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      JaffaCakes118_174f745bf6da228f15f896ba2307ba63

    • Size

      321KB

    • MD5

      174f745bf6da228f15f896ba2307ba63

    • SHA1

      8c05e49689703cc5acc5239de838b4c3ecd6b4cb

    • SHA256

      15ae266b9c02e77787fa42215f2f6925df8d9f8d48fb36fc644b2c9988048f65

    • SHA512

      f489f49d52f050ac5421de09d677b872c6e3e89eeb131c3a6552bb44b09460afbf8a033a28aeb1352a688d2efcbe1b8226eeeef330bdc67c55cfb197bbcc7a2a

    • SSDEEP

      6144:PDQKrk2BsM4e3JUkxJK7Llkc8QxqPOXZJfPbtBcwwnTVESEzBfH:rLk2B74e3JU3Lua2OpVZBMTVESeH

    Score
    6/10
    bootkitdiscoverypersistenceupx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks