Overview

overview

10

Static

static

3

8d61866589...18.exe

windows7-x64

10

8d61866589...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8d6186658958e29ff84ac8e8d45c96cf_JaffaCakes118

  • Size

    347KB

  • Sample

    240602-jvj5nafe3z

  • MD5

    8d6186658958e29ff84ac8e8d45c96cf

  • SHA1

    0418a6f893eb8095cc5c2cdc702bd7c420739c00

  • SHA256

    0b501e2cedad1838304551cb04498cfe2f47fb31ca7c0a4a05bd444a7f039158

  • SHA512

    862c2b257386ad23f9a520e65a5595517294fa9f4425c94055f0db7a2714b7b000744beb170f630999a701128a8131632137bb0b81ba7052eddcd2a5c0a85f5a

  • SSDEEP

    3072:c3X55K8ivf2WETl4QuNRLurVzwefoh5/nmXkQr5D0elEo81WZfZ4bIGDiIkya9gu:+we8/mzielEP1aZ4cGOI+gSS3rM

Score
10/10
emotetbankertrojan

Malware Config

Targets

    • Target

      8d6186658958e29ff84ac8e8d45c96cf_JaffaCakes118

    • Size

      347KB

    • MD5

      8d6186658958e29ff84ac8e8d45c96cf

    • SHA1

      0418a6f893eb8095cc5c2cdc702bd7c420739c00

    • SHA256

      0b501e2cedad1838304551cb04498cfe2f47fb31ca7c0a4a05bd444a7f039158

    • SHA512

      862c2b257386ad23f9a520e65a5595517294fa9f4425c94055f0db7a2714b7b000744beb170f630999a701128a8131632137bb0b81ba7052eddcd2a5c0a85f5a

    • SSDEEP

      3072:c3X55K8ivf2WETl4QuNRLurVzwefoh5/nmXkQr5D0elEo81WZfZ4bIGDiIkya9gu:+we8/mzielEP1aZ4cGOI+gSS3rM

    Score
    10/10
    emotetbankertrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks