Overview

overview

7

Static

static

3

605377a80e...18.exe

windows7-x64

7

605377a80e...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    605377a80ef3b5ec88ab4687e1878735_JaffaCakes118

  • Size

    91KB

  • Sample

    240720-2y3ehs1dlr

  • MD5

    605377a80ef3b5ec88ab4687e1878735

  • SHA1

    16301f2d564e4225f83d6ab458a0c47df8718e67

  • SHA256

    0f38f3e076a9431243ec072ab5f360620bf1a817e490222b49d39d46a6737f15

  • SHA512

    76a9e4b5f4ad2062bdda5c54ed66792cd9d9e7015ec1b174d10b44f79c80e17c914fc4a4caf184105ed8b1788126324a44fdac009f9930157f50bfac9f141bc5

  • SSDEEP

    1536:ZiDLG7z8p+SZjBHdEhIxBtS5Q5grdU3+kNS9Y/bmF6uIo6nX7mNeomBZzJ1J+B0b:ZifEzyPHdEaaQ5g2Ow2Y/bmF65NCNeoS

Score
7/10

Malware Config

Targets

    • Target

      605377a80ef3b5ec88ab4687e1878735_JaffaCakes118

    • Size

      91KB

    • MD5

      605377a80ef3b5ec88ab4687e1878735

    • SHA1

      16301f2d564e4225f83d6ab458a0c47df8718e67

    • SHA256

      0f38f3e076a9431243ec072ab5f360620bf1a817e490222b49d39d46a6737f15

    • SHA512

      76a9e4b5f4ad2062bdda5c54ed66792cd9d9e7015ec1b174d10b44f79c80e17c914fc4a4caf184105ed8b1788126324a44fdac009f9930157f50bfac9f141bc5

    • SSDEEP

      1536:ZiDLG7z8p+SZjBHdEhIxBtS5Q5grdU3+kNS9Y/bmF6uIo6nX7mNeomBZzJ1J+B0b:ZifEzyPHdEaaQ5g2Ow2Y/bmF65NCNeoS

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks