General

  • Target

    09c3a637fa2e89a09f62d940f930e226_JaffaCakes118

  • Size

    63KB

  • Sample

    240624-vmkl1atbjh

  • MD5

    09c3a637fa2e89a09f62d940f930e226

  • SHA1

    256740d9d7bed58a688b0306eb351508a708b535

  • SHA256

    7589befb3511f7d98df19bf84c30ca9019b4dc8a675c38d9b056c8c3fd672f4b

  • SHA512

    7b6035a8fab602e371b159e7e319f5073f934bc65108ad4c6193b0b6e162f880c874d8fb41357cf8ffc795bdc5660387dd882a39653aaa829899298f9be4afd4

  • SSDEEP

    1536:4Mfrrp//AIVfSswKHo9sYPfTIKZE6cnqFp3CaNg:3fr9//zw9n3TIR6cnYRg

Score
8/10

Malware Config

Targets

    • Target

      09c3a637fa2e89a09f62d940f930e226_JaffaCakes118

    • Size

      63KB

    • MD5

      09c3a637fa2e89a09f62d940f930e226

    • SHA1

      256740d9d7bed58a688b0306eb351508a708b535

    • SHA256

      7589befb3511f7d98df19bf84c30ca9019b4dc8a675c38d9b056c8c3fd672f4b

    • SHA512

      7b6035a8fab602e371b159e7e319f5073f934bc65108ad4c6193b0b6e162f880c874d8fb41357cf8ffc795bdc5660387dd882a39653aaa829899298f9be4afd4

    • SSDEEP

      1536:4Mfrrp//AIVfSswKHo9sYPfTIKZE6cnqFp3CaNg:3fr9//zw9n3TIR6cnYRg

    Score
    8/10
    • Contacts a large (647) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks