Overview

overview

10

Static

static

10

c3ac6788e7...18.exe

windows7-x64

10

c3ac6788e7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c3ac6788e749c433eaf7cd17b0aee92e_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240826-x5xema1epe

  • MD5

    c3ac6788e749c433eaf7cd17b0aee92e

  • SHA1

    58abb9cb9844d8248bab92901571e5069e9f655d

  • SHA256

    b68e6bf4696b566055d30a0ccdf35b784b725fe3d30dfce396612fc8058aace3

  • SHA512

    6e80a5d9a01dde067b5b367d7ed096b168f9f9513904dc35538767331a37c8524721c2d7958ebb33197051da747fbf65471dae34dd0e9675ae3338fd57a036b4

  • SSDEEP

    24576:Ib77WAYBBAEXsG0gj26ohW8jKXe54V+N9ntS/eve+cHE/se:ICAMsG0nlh5jt9cHE/

Score
10/10
bazaloaderdiscoverytrojan

Malware Config

Targets

    • Target

      c3ac6788e749c433eaf7cd17b0aee92e_JaffaCakes118

    • Size

      1.5MB

    • MD5

      c3ac6788e749c433eaf7cd17b0aee92e

    • SHA1

      58abb9cb9844d8248bab92901571e5069e9f655d

    • SHA256

      b68e6bf4696b566055d30a0ccdf35b784b725fe3d30dfce396612fc8058aace3

    • SHA512

      6e80a5d9a01dde067b5b367d7ed096b168f9f9513904dc35538767331a37c8524721c2d7958ebb33197051da747fbf65471dae34dd0e9675ae3338fd57a036b4

    • SSDEEP

      24576:Ib77WAYBBAEXsG0gj26ohW8jKXe54V+N9ntS/eve+cHE/se:ICAMsG0nlh5jt9cHE/

    Score
    10/10
    discoverytrojan

    • Detects BazaLoader malware

      BazaLoader is a trojan that transmits logs to the Command and Control (C2) server, encoding them in BASE64 format through GET requests - JaffaCakes118.

      trojan

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks