Overview

overview

6

Static

static

3

Tubejamming.exe

windows7-x64

6

Tubejamming.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Tubejamming.zip

  • Size

    66KB

  • Sample

    240630-papgja1bmn

  • MD5

    06238e7ed9f7627a6c0f138d0efd2d39

  • SHA1

    2cf27316b30ed5994aa9572567c87ff2610be8d5

  • SHA256

    b1cf3e052850308ab2adb54ba178bf2d9ff1334d4b01f92a36b118dd038f2a5b

  • SHA512

    580434ba483f22347deada2f8b420c47aa88555c43eb440f6349be267b9ce77f0bbffed2a2dded12fed15f72a653978e70a3092e4c10ed68a99cd8fc3fb847e0

  • SSDEEP

    1536:hWDrA6ZTVksesUuU1RIr3bSB5I/Jx+LZGG4++cnlxM+m7yX/3XV:hOAOkbuU123bSCw6cnLs7svV

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      Tubejamming.exe

    • Size

      132KB

    • MD5

      6ee6bd3de96fe9d2906791c8c1f655db

    • SHA1

      156d079c5acc1b987b0408d35a0970a409e1c7bf

    • SHA256

      ad73605e565dfaf70f9a113a52cf857d46bd0d61bccadaef33450162929ac865

    • SHA512

      cfbc29fd03cf6c2d563d2f224114e6efaaf60007931fd451ace23992b3b5a2b438c80d544170fb09644a259cfcb19bdd9b51be213f359889a3c4f3c309c26192

    • SSDEEP

      3072:U4Uta0z5jdTRdydJvjROM7RzfARlPmNaxeJUKyfv6/:ZKaEnTEJPK1oyfv6/

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks