Overview

overview

10

Static

static

10

8a804570ec...kes118

debian-9-armhf

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a804570ec5719b5fe18a0948ea4d915_JaffaCakes118

  • Size

    127KB

  • Sample

    240601-p2l6gscf6y

  • MD5

    8a804570ec5719b5fe18a0948ea4d915

  • SHA1

    c7da0b4134d8ca1baa2d6a77042c3a1ef9aa0f43

  • SHA256

    a587083ef2c6169e87ba73e9e51f1e78d020b5924e4419fe0ab9527e298562e1

  • SHA512

    e9372a5aacc3fee692d954f61492b1bb217d8398af30d63df9451e1420be8e1b717ad01530a113c9c2c12d4e09acebbda81183169c82e25ea7d1c3237910b608

  • SSDEEP

    3072:1WU8SX5yspNrUfnfYQaaYmn3KxLBatoTuIYn528uh3xM/9m9vn:QSwaaYmyVatoTuFn1uhBM/9aP

Score
10/10
darknexusdiscovery

Malware Config

Targets

    • Target

      8a804570ec5719b5fe18a0948ea4d915_JaffaCakes118

    • Size

      127KB

    • MD5

      8a804570ec5719b5fe18a0948ea4d915

    • SHA1

      c7da0b4134d8ca1baa2d6a77042c3a1ef9aa0f43

    • SHA256

      a587083ef2c6169e87ba73e9e51f1e78d020b5924e4419fe0ab9527e298562e1

    • SHA512

      e9372a5aacc3fee692d954f61492b1bb217d8398af30d63df9451e1420be8e1b717ad01530a113c9c2c12d4e09acebbda81183169c82e25ea7d1c3237910b608

    • SSDEEP

      3072:1WU8SX5yspNrUfnfYQaaYmn3KxLBatoTuIYn528uh3xM/9m9vn:QSwaaYmyVatoTuFn1uhBM/9aP

    Score
    9/10
    discovery

    • Contacts a large (27987) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks