Overview

overview

9

Static

static

7

8f9b7b62d9...kes118

ubuntu-24.04-amd64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f9b7b62d91aaed8f19675aa61e72085_JaffaCakes118

  • Size

    2.5MB

  • Sample

    240602-144zvshh82

  • MD5

    8f9b7b62d91aaed8f19675aa61e72085

  • SHA1

    0870085b400d1430d7fe22951a628d3c6fe0feda

  • SHA256

    06ddd403a9a129d3ade62bf3eb4abb62cb3368291b5263adb894a14ef5a6b4ea

  • SHA512

    a3ebfb8b6bfc1065f422b213de25115f709a56ef87112190f3803b61c944151ad81aa1a08367f741a8f10534eba982790e83989c455f651be7b12ddee6a94b75

  • SSDEEP

    49152:jE60bwojxM0znf4WeNLFe2lAAwk645Hy6N1n18MGoM:tOBC0zATNLFtokF5HToV

Score
9/10
discoverylinuxmotwphishingupx

Malware Config

Targets

    • Target

      8f9b7b62d91aaed8f19675aa61e72085_JaffaCakes118

    • Size

      2.5MB

    • MD5

      8f9b7b62d91aaed8f19675aa61e72085

    • SHA1

      0870085b400d1430d7fe22951a628d3c6fe0feda

    • SHA256

      06ddd403a9a129d3ade62bf3eb4abb62cb3368291b5263adb894a14ef5a6b4ea

    • SHA512

      a3ebfb8b6bfc1065f422b213de25115f709a56ef87112190f3803b61c944151ad81aa1a08367f741a8f10534eba982790e83989c455f651be7b12ddee6a94b75

    • SSDEEP

      49152:jE60bwojxM0znf4WeNLFe2lAAwk645Hy6N1n18MGoM:tOBC0zATNLFtokF5HToV

    Score
    9/10
    discoverymotwphishing

    • Contacts a large (8332) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Mark of the Web detected: This indicates that the page was originally saved or cloned.

      phishingmotw
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks