General
- Target jaffacakes118__9a8a3e73af515255e5b3d675ee739eaf
- Size 959KB
- Sample260919-sdphgssbrg
- SHA256 0112ba24a27fb9139489ae944aa3c6694b955c45ebd0ced656c69f94195a8b60
- MD5 9a8a3e73af515255e5b3d675ee739eaf
- SHA1 0f40fadc6a65eb8a6720a2b161db61fc81440821
- SHA512 9ff1538f5b3bed11bcc38146784d3dd37b212db70f9b2eef4b0b315789f63786275a40902950d04b530ae82dcbc945d50262f5a650e52fa3bee75193a43ecd0e
- SSDEEP 12288:Vcs5s0tpRsbQ5X6sHtgZgpbYTAUy5ECKhS0tpRsbQ51:2is0tpRsbQ55HfUNS0tpRsbQ5
- TLSH T18725290FFEABC425D512E6349EC3A4D075A2F8252D0F27D665D8272AE423E11F984B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118__9a8a3e73af515255e5b3d675ee739eaf.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118__9a8a3e73af515255e5b3d675ee739eaf.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118__9a8a3e73af515255e5b3d675ee739eaf
- Size 959KB
- SHA256 0112ba24a27fb9139489ae944aa3c6694b955c45ebd0ced656c69f94195a8b60
- MD5 9a8a3e73af515255e5b3d675ee739eaf
- SHA1 0f40fadc6a65eb8a6720a2b161db61fc81440821
- SHA512 9ff1538f5b3bed11bcc38146784d3dd37b212db70f9b2eef4b0b315789f63786275a40902950d04b530ae82dcbc945d50262f5a650e52fa3bee75193a43ecd0e
- SSDEEP 12288:Vcs5s0tpRsbQ5X6sHtgZgpbYTAUy5ECKhS0tpRsbQ51:2is0tpRsbQ55HfUNS0tpRsbQ5
- TLSH T18725290FFEABC425D512E6349EC3A4D075A2F8252D0F27D665D8272AE423E11F984B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1