General

  • Target

    42f2b39a182b0603d128ffab24cfbf26_JaffaCakes118

  • Size

    2.2MB

  • Sample

    240514-zawwqaff35

  • MD5

    42f2b39a182b0603d128ffab24cfbf26

  • SHA1

    ac730171506124495fb4e5980d2be7e61cd1c0e3

  • SHA256

    6a8338da3d4fd6371ce3eb8eac02be1f91552e72aa0556e1a8579473e6025ec7

  • SHA512

    8d501c4fafd6af98c6468959f6d3c92b8a32557e41551a2a949e8db08716e27a18b83aa3b861d5ef75aaef139bdb089fe9cc868c53bfaf3ce20f2a40992088bf

  • SSDEEP

    49152:BEx3tccKc8CWp7yTTSNyCsQ6fXa9mBcb0f+oOLyZlbh1fa:iFttKtbpIc8goJOMFb

Score
10/10

Malware Config

Extracted

Family

stealthworker

Version

3.12

C2

http://91.240.118.73:8888

Targets

    • Target

      42f2b39a182b0603d128ffab24cfbf26_JaffaCakes118

    • Size

      2.2MB

    • MD5

      42f2b39a182b0603d128ffab24cfbf26

    • SHA1

      ac730171506124495fb4e5980d2be7e61cd1c0e3

    • SHA256

      6a8338da3d4fd6371ce3eb8eac02be1f91552e72aa0556e1a8579473e6025ec7

    • SHA512

      8d501c4fafd6af98c6468959f6d3c92b8a32557e41551a2a949e8db08716e27a18b83aa3b861d5ef75aaef139bdb089fe9cc868c53bfaf3ce20f2a40992088bf

    • SSDEEP

      49152:BEx3tccKc8CWp7yTTSNyCsQ6fXa9mBcb0f+oOLyZlbh1fa:iFttKtbpIc8goJOMFb

    Score
    10/10
    • StealthWorker

      StealthWorker is golang-based brute force malware.

    • Drops startup file

MITRE ATT&CK Matrix

Tasks