Overview

overview

10

Static

static

10

JaffaCakes...4e.exe

windows7-x64

7

JaffaCakes...4e.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_57bdac3e41c7833d8beec567c2c0724e

  • Size

    615KB

  • Sample

    250306-1vdrbayqx7

  • MD5

    57bdac3e41c7833d8beec567c2c0724e

  • SHA1

    2596482af5dcdf05c70b1809303ca7a38f005cfa

  • SHA256

    56d1c96239ce557c3f29623e0baf5f25ab866065c986e0e08537219db122263a

  • SHA512

    0c7c18f561734cede666f0a66cb5f4a4eb9cb7eaa2b57eb7f9f9b643ca4e8512a9870b703d7293fd26a0a5a33b7c6ffb57d0d043ba127b2861b5b42a832202e5

  • SSDEEP

    12288:PQTTBgd2hY0XidgjVwJKtHnXCiKhGMlauX46BGXBHmCJ2EY:PTdQY0Xfj+JsHjGGGrX46BMBHnJ2D

Score
10/10
gh0stratbootkitdiscoverypersistence

Malware Config

Targets

    • Target

      JaffaCakes118_57bdac3e41c7833d8beec567c2c0724e

    • Size

      615KB

    • MD5

      57bdac3e41c7833d8beec567c2c0724e

    • SHA1

      2596482af5dcdf05c70b1809303ca7a38f005cfa

    • SHA256

      56d1c96239ce557c3f29623e0baf5f25ab866065c986e0e08537219db122263a

    • SHA512

      0c7c18f561734cede666f0a66cb5f4a4eb9cb7eaa2b57eb7f9f9b643ca4e8512a9870b703d7293fd26a0a5a33b7c6ffb57d0d043ba127b2861b5b42a832202e5

    • SSDEEP

      12288:PQTTBgd2hY0XidgjVwJKtHnXCiKhGMlauX46BGXBHmCJ2EY:PTdQY0Xfj+JsHjGGGrX46BMBHnJ2D

    Score
    7/10
    bootkitdiscoverypersistence

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks