General

  • Target

    4aa0332dbe9c56d15001510ea862e059_JaffaCakes118

  • Size

    41KB

  • Sample

    240715-vrvb1atcrg

  • MD5

    4aa0332dbe9c56d15001510ea862e059

  • SHA1

    26a2c92afc32d657692ebddbbb72917ec89b495a

  • SHA256

    4365cda4dbf0e552d078c515cfd4451b544112b6bfdc7a0e0ba38a7869c12138

  • SHA512

    59a11c05445a2af02ef9830f95ee7d05f7ea964205548cdf694edfcb9c38d42fb7ed41001c7fc3bce801ac4686769c89a25f18f2d8bc93d763f00fd6965cc9c0

  • SSDEEP

    768:Bi6MbK0BYoGfqCZlySRO2woK/Z6YIhoFtQjXyEJvc8JzKZr12qhZhXq:cJWoYnqCjao/HzxCQzKZrYq5Xq

Score
7/10

Malware Config

Targets

    • Target

      4aa0332dbe9c56d15001510ea862e059_JaffaCakes118

    • Size

      41KB

    • MD5

      4aa0332dbe9c56d15001510ea862e059

    • SHA1

      26a2c92afc32d657692ebddbbb72917ec89b495a

    • SHA256

      4365cda4dbf0e552d078c515cfd4451b544112b6bfdc7a0e0ba38a7869c12138

    • SHA512

      59a11c05445a2af02ef9830f95ee7d05f7ea964205548cdf694edfcb9c38d42fb7ed41001c7fc3bce801ac4686769c89a25f18f2d8bc93d763f00fd6965cc9c0

    • SSDEEP

      768:Bi6MbK0BYoGfqCZlySRO2woK/Z6YIhoFtQjXyEJvc8JzKZr12qhZhXq:cJWoYnqCjao/HzxCQzKZrYq5Xq

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks