Overview

overview

7

Static

static

3

52f6676242...18.exe

windows7-x64

7

52f6676242...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    52f6676242ad7776f212e652521cc6a3_JaffaCakes118

  • Size

    170KB

  • Sample

    240717-pkx7eszhll

  • MD5

    52f6676242ad7776f212e652521cc6a3

  • SHA1

    6c5de54bb5fb8a6c219afb394b70f2b798bf88d3

  • SHA256

    f81b208bcf1907bdd65d175e0bf589afb8b4d578159810b470bbc1a905f13078

  • SHA512

    10c65ef80e0e02797ae17766881c593112d392220d526bec872c57160852eba94597d58641b91c26cf07a1b8c9d1556c2dba75102098fb1de51582b5d809b142

  • SSDEEP

    3072:27n6GeW2G+OKR+igvwg3HDOU/QcEiUwAKMvVx8VMLckceRd+pn3ZrN0yUb62D+MC:2T2PZgvwg3HnFEiPI82IUd+B3ZrNbe+9

Score
7/10

Malware Config

Targets

    • Target

      52f6676242ad7776f212e652521cc6a3_JaffaCakes118

    • Size

      170KB

    • MD5

      52f6676242ad7776f212e652521cc6a3

    • SHA1

      6c5de54bb5fb8a6c219afb394b70f2b798bf88d3

    • SHA256

      f81b208bcf1907bdd65d175e0bf589afb8b4d578159810b470bbc1a905f13078

    • SHA512

      10c65ef80e0e02797ae17766881c593112d392220d526bec872c57160852eba94597d58641b91c26cf07a1b8c9d1556c2dba75102098fb1de51582b5d809b142

    • SSDEEP

      3072:27n6GeW2G+OKR+igvwg3HDOU/QcEiUwAKMvVx8VMLckceRd+pn3ZrN0yUb62D+MC:2T2PZgvwg3HnFEiPI82IUd+B3ZrNbe+9

    Score
    7/10

    • Deletes itself

    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks