Overview

overview

10

Static

static

9

3066d1b2e8...18.exe

windows7-x64

10

3066d1b2e8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3066d1b2e84e8444082d70a1ad90c017_JaffaCakes118

  • Size

    109KB

  • Sample

    240510-wwdeqaae9w

  • MD5

    3066d1b2e84e8444082d70a1ad90c017

  • SHA1

    3bd522bd7256095774f78ba98ea0f4085651b88a

  • SHA256

    61ffe36301e722b85088cfceb5d5a703e57eff907119ef305dc92da45c254aaf

  • SHA512

    84c61d702d184538cbdac5d99ae18cc9abd6aef456db3133fb1a694aca2947683f098d6601964c633c274358b9b510761e6afee8adfaea03e23609cd654a8fc9

  • SSDEEP

    3072:OCrRG9LEWHyMp6awrpEoNLna7EP7S5p1gRk:OCrs0JaYvnDPgg2

Score
10/10
emotetbankercryptonepackertrojan

Malware Config

Targets

    • Target

      3066d1b2e84e8444082d70a1ad90c017_JaffaCakes118

    • Size

      109KB

    • MD5

      3066d1b2e84e8444082d70a1ad90c017

    • SHA1

      3bd522bd7256095774f78ba98ea0f4085651b88a

    • SHA256

      61ffe36301e722b85088cfceb5d5a703e57eff907119ef305dc92da45c254aaf

    • SHA512

      84c61d702d184538cbdac5d99ae18cc9abd6aef456db3133fb1a694aca2947683f098d6601964c633c274358b9b510761e6afee8adfaea03e23609cd654a8fc9

    • SSDEEP

      3072:OCrRG9LEWHyMp6awrpEoNLna7EP7S5p1gRk:OCrs0JaYvnDPgg2

    Score
    10/10
    emotetbankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks