Overview

overview

7

Static

static

3

0aabbce1ef...18.exe

windows7-x64

7

0aabbce1ef...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0aabbce1efd14327d50739e1e9be306b_JaffaCakes118

  • Size

    298KB

  • Sample

    240624-y5nyxs1eqb

  • MD5

    0aabbce1efd14327d50739e1e9be306b

  • SHA1

    b778875fff7e8d4df1a7e35108cc686d83c007d2

  • SHA256

    0c48ab92f21bc57cd8f1eb7aae4adb3541f9261da4bc065accdc4bd0fbecaf4c

  • SHA512

    40c62ce6c8fc06f5e00e7987141840937b8c15f370f72ddea676014f832471f1b60f824589e0de5a7eeb16dfc352fffe1e5869200ac96dbcdccda964914ece2e

  • SSDEEP

    6144:LEcEYCW+j1z1p5EmkC+h9A+x3X60zfriGZv2MaVl/s:xD4jV1gmkBhTJq0DrVJCVl/

Score
7/10

Malware Config

Targets

    • Target

      0aabbce1efd14327d50739e1e9be306b_JaffaCakes118

    • Size

      298KB

    • MD5

      0aabbce1efd14327d50739e1e9be306b

    • SHA1

      b778875fff7e8d4df1a7e35108cc686d83c007d2

    • SHA256

      0c48ab92f21bc57cd8f1eb7aae4adb3541f9261da4bc065accdc4bd0fbecaf4c

    • SHA512

      40c62ce6c8fc06f5e00e7987141840937b8c15f370f72ddea676014f832471f1b60f824589e0de5a7eeb16dfc352fffe1e5869200ac96dbcdccda964914ece2e

    • SSDEEP

      6144:LEcEYCW+j1z1p5EmkC+h9A+x3X60zfriGZv2MaVl/s:xD4jV1gmkBhTJq0DrVJCVl/

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks