Overview

overview

7

Static

static

3

fd868175b7...18.exe

windows7-x64

7

fd868175b7...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fd868175b785ac4d79a609216358b84b_JaffaCakes118

  • Size

    385KB

  • Sample

    240420-ypn9rage24

  • MD5

    fd868175b785ac4d79a609216358b84b

  • SHA1

    ef03d95e8fc1adfad7a6e22f9c61c2564e93a9f2

  • SHA256

    06e8a0ba726a5d7ef3784c177073ec5ea64d07ecbaa1f1debc1b6fe12af0a69e

  • SHA512

    8660a99076bd5e24e93a57d5b69931941e991e8eaa70f477d181c2bc3c9d81a99683b7ba82f92ffb0273484ab43ddbc0215361c60a10614cafe329a49a26a865

  • SSDEEP

    6144:2Hky8EEjYyP+UJCrzvRz4eqduTo424cZJSt6Ie7FEw+is5982+D2btzkPFeB:u8bh0vPnsSE7zzs5nPFk9eB

Score
7/10

Malware Config

Targets

    • Target

      fd868175b785ac4d79a609216358b84b_JaffaCakes118

    • Size

      385KB

    • MD5

      fd868175b785ac4d79a609216358b84b

    • SHA1

      ef03d95e8fc1adfad7a6e22f9c61c2564e93a9f2

    • SHA256

      06e8a0ba726a5d7ef3784c177073ec5ea64d07ecbaa1f1debc1b6fe12af0a69e

    • SHA512

      8660a99076bd5e24e93a57d5b69931941e991e8eaa70f477d181c2bc3c9d81a99683b7ba82f92ffb0273484ab43ddbc0215361c60a10614cafe329a49a26a865

    • SSDEEP

      6144:2Hky8EEjYyP+UJCrzvRz4eqduTo424cZJSt6Ie7FEw+is5982+D2btzkPFeB:u8bh0vPnsSE7zzs5nPFk9eB

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks