Overview

overview

7

Static

static

3

b23d6353c0...18.exe

windows7-x64

7

b23d6353c0...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b23d6353c04ad299d4da0ab60514316d_JaffaCakes118

  • Size

    190KB

  • Sample

    240821-f2nvms1hlh

  • MD5

    b23d6353c04ad299d4da0ab60514316d

  • SHA1

    710cb85402bf9d3df98e1e972cb56a0798a539a0

  • SHA256

    b11863a9f7d9db700b0fcb7fc551f80c4a4b357c911636da98504a483dd74cc2

  • SHA512

    e4576c0a66ca110210c165db68091d772c8f97cad8057e5c72bbfd73e45b474810758fab9b9ec9239df4e2683e7172b2841dedad3f9454eb38498da0cb696856

  • SSDEEP

    3072:u0E5BTwGH8JMrFRGJKD6bdDixbJRDRvX8OPZ3fNsf25CaSWOz1z+lPiWfDh3KIz7:/E5BuJMZRG5dmxbvRvX8uFuC9SWOzR+3

Score
7/10
discovery

Malware Config

Targets

    • Target

      b23d6353c04ad299d4da0ab60514316d_JaffaCakes118

    • Size

      190KB

    • MD5

      b23d6353c04ad299d4da0ab60514316d

    • SHA1

      710cb85402bf9d3df98e1e972cb56a0798a539a0

    • SHA256

      b11863a9f7d9db700b0fcb7fc551f80c4a4b357c911636da98504a483dd74cc2

    • SHA512

      e4576c0a66ca110210c165db68091d772c8f97cad8057e5c72bbfd73e45b474810758fab9b9ec9239df4e2683e7172b2841dedad3f9454eb38498da0cb696856

    • SSDEEP

      3072:u0E5BTwGH8JMrFRGJKD6bdDixbJRDRvX8OPZ3fNsf25CaSWOz1z+lPiWfDh3KIz7:/E5BuJMZRG5dmxbvRvX8uFuC9SWOzR+3

    Score
    7/10
    discovery

    • Deletes itself

    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks