General
- Target jaffacakes118_not-a-virus.AdWare.Win32.ScreenSaver.i.24e26ffdae0c1617abf0a0752aa67b44
- Size 241KB
- Sample261014-d1833sec75
- SHA256 6f40de7107acf45e7dcfa3cb501d85d6904dcf643ba74cdb8c561cfeb8efa8c6
- MD5 24e26ffdae0c1617abf0a0752aa67b44
- SHA1 16241e59f20d71f6d62717324d7b1d49f6f1ba65
- SHA512 a7b9bcf8b2807773f3e3c78e84b1fd4719d56b3e0848bb6e2941bde05ae32a2f66a017c932f2246ca850a9c916a44e3aa83517a551cb8e13397e1c4d15883cd8
- SSDEEP 6144:GkeENDvTSn2SV/GuhYdViC7X57+nM02HzFZX7Nv:GNEND/k/GLPX57+nP2HznNv
- TLSH T139342306D33008C6C8024D37D227DD6AC695F913DD3FB746A9D16A2EED79792ABC3084
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
jaffacakes118_not-a-virus.AdWare.Win32.ScreenSaver.i.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_not-a-virus.AdWare.Win32.ScreenSaver.i.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_not-a-virus.AdWare.Win32.ScreenSaver.i.24e26ffdae0c1617abf0a0752aa67b44
- Size 241KB
- SHA256 6f40de7107acf45e7dcfa3cb501d85d6904dcf643ba74cdb8c561cfeb8efa8c6
- MD5 24e26ffdae0c1617abf0a0752aa67b44
- SHA1 16241e59f20d71f6d62717324d7b1d49f6f1ba65
- SHA512 a7b9bcf8b2807773f3e3c78e84b1fd4719d56b3e0848bb6e2941bde05ae32a2f66a017c932f2246ca850a9c916a44e3aa83517a551cb8e13397e1c4d15883cd8
- SSDEEP 6144:GkeENDvTSn2SV/GuhYdViC7X57+nM02HzFZX7Nv:GNEND/k/GLPX57+nP2HznNv
- TLSH T139342306D33008C6C8024D37D227DD6AC695F913DD3FB746A9D16A2EED79792ABC3084
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1