General

  • Target

    950a6f178e67ad31c3ce3df0f7ee84b4_JaffaCakes118

  • Size

    156KB

  • Sample

    240604-qycy3shd3v

  • MD5

    950a6f178e67ad31c3ce3df0f7ee84b4

  • SHA1

    42c1b0e1592cec2275d7aa936672bf95009b19e5

  • SHA256

    db36eb21ce9a029ef6910fd814a251f1b88be7bcd719fb0d6fdda1bf05c25213

  • SHA512

    3a67161a53416add0e8c0a49de9851aa42c46134599c2158502eebdf40b17d6c2921185c1b69dfb5a340d4848deaeb137116a246cf73f655df13185379911423

  • SSDEEP

    3072:Tn5vM2Lkfmaspwur7xYiWNYS8YagxlJkLay:TnLkfmJpwuuNPB7J

Score
10/10

Malware Config

Targets

    • Target

      950a6f178e67ad31c3ce3df0f7ee84b4_JaffaCakes118

    • Size

      156KB

    • MD5

      950a6f178e67ad31c3ce3df0f7ee84b4

    • SHA1

      42c1b0e1592cec2275d7aa936672bf95009b19e5

    • SHA256

      db36eb21ce9a029ef6910fd814a251f1b88be7bcd719fb0d6fdda1bf05c25213

    • SHA512

      3a67161a53416add0e8c0a49de9851aa42c46134599c2158502eebdf40b17d6c2921185c1b69dfb5a340d4848deaeb137116a246cf73f655df13185379911423

    • SSDEEP

      3072:Tn5vM2Lkfmaspwur7xYiWNYS8YagxlJkLay:TnLkfmJpwuuNPB7J

    Score
    10/10
    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Tasks