General

  • Target

    45a7339a8c7deaa2503f8343e6e6fd03_JaffaCakes118

  • Size

    225KB

  • Sample

    240515-l2sfqacd59

  • MD5

    45a7339a8c7deaa2503f8343e6e6fd03

  • SHA1

    03c4e6d50c91a53ff5299343131fa95265dbe526

  • SHA256

    02ecffe82918f17ba1fcef2303a266e43db1f110c0760e1d41fd036dfd799afa

  • SHA512

    fe21a8bbc16268c844ff8a00ed9a913bebb3eb2984f4893aaf86a45df516b751cab54bdc8c8b4186b048982837383ba3973e9b45fd39db55e684bb8c11f15be2

  • SSDEEP

    3072:hreM18hNfd2Qn0n5DP0YSyo6Q2P8Y8h/ttG5E0NF6/ZaIXXXHbg32S:71iNfdBn0tSyfQc8Y8hFt

Score
10/10

Malware Config

Targets

    • Target

      45a7339a8c7deaa2503f8343e6e6fd03_JaffaCakes118

    • Size

      225KB

    • MD5

      45a7339a8c7deaa2503f8343e6e6fd03

    • SHA1

      03c4e6d50c91a53ff5299343131fa95265dbe526

    • SHA256

      02ecffe82918f17ba1fcef2303a266e43db1f110c0760e1d41fd036dfd799afa

    • SHA512

      fe21a8bbc16268c844ff8a00ed9a913bebb3eb2984f4893aaf86a45df516b751cab54bdc8c8b4186b048982837383ba3973e9b45fd39db55e684bb8c11f15be2

    • SSDEEP

      3072:hreM18hNfd2Qn0n5DP0YSyo6Q2P8Y8h/ttG5E0NF6/ZaIXXXHbg32S:71iNfdBn0tSyfQc8Y8hFt

    Score
    10/10
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks