Overview

overview

7

Static

static

3

45a70e8d52...18.exe

windows7-x64

7

45a70e8d52...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45a70e8d5279268a54a9296b41b81e77_JaffaCakes118

  • Size

    42KB

  • Sample

    240714-nr29aa1emh

  • MD5

    45a70e8d5279268a54a9296b41b81e77

  • SHA1

    ea1c5d774ec9ac20a2e60f6e1aa99c8fa5e0910b

  • SHA256

    c15bc05bc42f1aad6d01e04853f5033900564c8059aa9750656bf27d95b65f8c

  • SHA512

    145e5f29bd99ed7f9e9815159aad23c1a80d724011a31da9885f6ed4a4e2fcb2c1e64349f675c57b9a35c6ef539535034a61d32ebdd4f0d09675b73b1cdcd64b

  • SSDEEP

    768:36Esy4oMuVJ9UFAp5v32pk9M7dZOJZBCN2T328Ro9H/auPl6eQPF0WABn:psH8OFA7K7dya2G4o9RP6PFbg

Score
7/10

Malware Config

Targets

    • Target

      45a70e8d5279268a54a9296b41b81e77_JaffaCakes118

    • Size

      42KB

    • MD5

      45a70e8d5279268a54a9296b41b81e77

    • SHA1

      ea1c5d774ec9ac20a2e60f6e1aa99c8fa5e0910b

    • SHA256

      c15bc05bc42f1aad6d01e04853f5033900564c8059aa9750656bf27d95b65f8c

    • SHA512

      145e5f29bd99ed7f9e9815159aad23c1a80d724011a31da9885f6ed4a4e2fcb2c1e64349f675c57b9a35c6ef539535034a61d32ebdd4f0d09675b73b1cdcd64b

    • SSDEEP

      768:36Esy4oMuVJ9UFAp5v32pk9M7dZOJZBCN2T328Ro9H/auPl6eQPF0WABn:psH8OFA7K7dya2G4o9RP6PFbg

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks