Overview

overview

10

Static

static

3

6920e9cada...18.exe

windows7-x64

10

6920e9cada...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6920e9cada37481469643baa7005eb68_JaffaCakes118

  • Size

    172KB

  • Sample

    240523-apk1bseg33

  • MD5

    6920e9cada37481469643baa7005eb68

  • SHA1

    c523768f7c3ec497a7e1a083aa23e1a6f6bc7c28

  • SHA256

    5a7c73db481459cc5506fdb2a27dfb9621e26168eb0e2e273bc1acfe7bc420f2

  • SHA512

    76a57fc976d489ef1a84cc906b86be5d22d7c7a964e297cea3965d95b8d6c0eaa4fccbb89b28b3941b266a3d41ea44c9f2ab06b3a525ad87a99d8a89daa63a66

  • SSDEEP

    3072:mBeoEepgjwqlRoSGuKrWVRCcd/xg5fnVVvJ221HCWY86bIWLu4Nrme/1Z:KE5NVJd/yf2M4

Score
10/10
emotetbankertrojan

Malware Config

Targets

    • Target

      6920e9cada37481469643baa7005eb68_JaffaCakes118

    • Size

      172KB

    • MD5

      6920e9cada37481469643baa7005eb68

    • SHA1

      c523768f7c3ec497a7e1a083aa23e1a6f6bc7c28

    • SHA256

      5a7c73db481459cc5506fdb2a27dfb9621e26168eb0e2e273bc1acfe7bc420f2

    • SHA512

      76a57fc976d489ef1a84cc906b86be5d22d7c7a964e297cea3965d95b8d6c0eaa4fccbb89b28b3941b266a3d41ea44c9f2ab06b3a525ad87a99d8a89daa63a66

    • SSDEEP

      3072:mBeoEepgjwqlRoSGuKrWVRCcd/xg5fnVVvJ221HCWY86bIWLu4Nrme/1Z:KE5NVJd/yf2M4

    Score
    10/10
    emotetbankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks