General
- Target jaffacakes118_Backdoor.Win32.Gbot.ftl.1feefb70f9586baf9a9f2f4ef953d5e3
- Size 139KB
- Sample261009-tkvhra1s8l
- SHA256 54e876ecdd1860df80b8706b3ed408a39ebe6fd678e716052ae0d014ff8995e7
- MD5 1feefb70f9586baf9a9f2f4ef953d5e3
- SHA1 8c4b42178558d3504f10f06f4d75590036234c48
- SHA512 8e5d397fedbc32ae62c4b3e51f4f6b240e8dfec431e31b7e0a8270341666e61b79a069257ca7685b089120d401edce1dbb472d7db5e26122deffc90691e25420
- SSDEEP 3072:s7GVJRVZGNfervjkF/zkoujp4n7qwfDnU8Or:s6zR6ZerwFLDut4ntUz
- TLSH T195D30221D3EA7B8AE6BB4E3208F67BD54939B9101D750F1B1451B19C0DBE301EBA8723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Backdoor.Win32.Gbot.ftl.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Backdoor.Win32.Gbot.ftl.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Backdoor.Win32.Gbot.ftl.1feefb70f9586baf9a9f2f4ef953d5e3
- Size 139KB
- SHA256 54e876ecdd1860df80b8706b3ed408a39ebe6fd678e716052ae0d014ff8995e7
- MD5 1feefb70f9586baf9a9f2f4ef953d5e3
- SHA1 8c4b42178558d3504f10f06f4d75590036234c48
- SHA512 8e5d397fedbc32ae62c4b3e51f4f6b240e8dfec431e31b7e0a8270341666e61b79a069257ca7685b089120d401edce1dbb472d7db5e26122deffc90691e25420
- SSDEEP 3072:s7GVJRVZGNfervjkF/zkoujp4n7qwfDnU8Or:s6zR6ZerwFLDut4ntUz
- TLSH T195D30221D3EA7B8AE6BB4E3208F67BD54939B9101D750F1B1451B19C0DBE301EBA8723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.