Overview

overview

7

Static

static

3

633693fa75...18.exe

windows7-x64

7

633693fa75...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    633693fa756a1edcd1ecfceacec511c2_JaffaCakes118

  • Size

    190KB

  • Sample

    240723-xzmm8starp

  • MD5

    633693fa756a1edcd1ecfceacec511c2

  • SHA1

    f53bfb55902a43de145dc225cde0d907389b2661

  • SHA256

    b6ad2f86e6a59aae8e24c0e3b6ccccdef24603d6b9e9b62cf79fbc22a1b0a9ff

  • SHA512

    b74bc2e91a6b2b39039ef4eb18d2205d8afa4440d0872795f46b6de389b67eed072e44e63b5e868c64f862b19f98fd2ecf5a9b3bc1b2767db98450f4e297844a

  • SSDEEP

    3072:884OMYA1qemQ1sdSbHpxGm5kzQUYujUhcjVV00gvP8inIU6FlDIo5bq:8P3qemCsszpxHazQUYujl7/gXiFlDIoY

Score
7/10
discovery

Malware Config

Targets

    • Target

      633693fa756a1edcd1ecfceacec511c2_JaffaCakes118

    • Size

      190KB

    • MD5

      633693fa756a1edcd1ecfceacec511c2

    • SHA1

      f53bfb55902a43de145dc225cde0d907389b2661

    • SHA256

      b6ad2f86e6a59aae8e24c0e3b6ccccdef24603d6b9e9b62cf79fbc22a1b0a9ff

    • SHA512

      b74bc2e91a6b2b39039ef4eb18d2205d8afa4440d0872795f46b6de389b67eed072e44e63b5e868c64f862b19f98fd2ecf5a9b3bc1b2767db98450f4e297844a

    • SSDEEP

      3072:884OMYA1qemQ1sdSbHpxGm5kzQUYujUhcjVV00gvP8inIU6FlDIo5bq:8P3qemCsszpxHazQUYujl7/gXiFlDIoY

    Score
    7/10
    discovery

    • Deletes itself

    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks