Overview

overview

6

Static

static

3

JaffaCakes...a8.exe

windows7-x64

6

JaffaCakes...a8.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_8ac23acbc2511e0b4d46648faebbb7a8

  • Size

    244KB

  • Sample

    250328-ryw8dsyqv5

  • MD5

    8ac23acbc2511e0b4d46648faebbb7a8

  • SHA1

    1dee5f2bc0073d83b329fbd3961c0f7b0174ac49

  • SHA256

    f56407bc63e47ab020c06bd7f6de96dc60590a4fd274ec060d4283b471add83a

  • SHA512

    48ddb6a9a03b245c06b8bd6be2d86f0833b2c335ba8321b54d1e154e9d774f70db08ef41a939152fd03a537fb19b0457943ad540b8b3879d0d0abce7174edb46

  • SSDEEP

    6144:z3P2nGsTc9fNtHynneSaGBGu7Bj5bennnnnnnnnnn:TPWGfVSnneEBJFjB

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      JaffaCakes118_8ac23acbc2511e0b4d46648faebbb7a8

    • Size

      244KB

    • MD5

      8ac23acbc2511e0b4d46648faebbb7a8

    • SHA1

      1dee5f2bc0073d83b329fbd3961c0f7b0174ac49

    • SHA256

      f56407bc63e47ab020c06bd7f6de96dc60590a4fd274ec060d4283b471add83a

    • SHA512

      48ddb6a9a03b245c06b8bd6be2d86f0833b2c335ba8321b54d1e154e9d774f70db08ef41a939152fd03a537fb19b0457943ad540b8b3879d0d0abce7174edb46

    • SSDEEP

      6144:z3P2nGsTc9fNtHynneSaGBGu7Bj5bennnnnnnnnnn:TPWGfVSnneEBJFjB

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks