Overview

overview

7

Static

static

3

dcb2de7b31...18.exe

windows7-x64

7

dcb2de7b31...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    dcb2de7b31f7b22fb6725c80d3d689e1_JaffaCakes118

  • Size

    36KB

  • Sample

    240912-vx4smavhjc

  • MD5

    dcb2de7b31f7b22fb6725c80d3d689e1

  • SHA1

    6b8d2a501e44a2cad0a2f65c67cc974b0779196e

  • SHA256

    c7d2ffce8289d1a8295282b670a6a9a93fc7f19e41304f26cadf3f45dd82c188

  • SHA512

    fee1a7f02bbd8c88070cb9c709155ecde9849aa03464e06e3bf2163f2e59341932df3f49a1ec78b3a4dfe2d2e13a437a39cec37f82bb558ce00241ec6d99152f

  • SSDEEP

    768:DlcTwpQJkYYTgOnHBqQTZqDsQw6AL7oh2q7vm6PrP2578NkbX:h8wyJnYEOH9ZqDw8h3bzPD2meX

Score
7/10
discovery

Malware Config

Targets

    • Target

      dcb2de7b31f7b22fb6725c80d3d689e1_JaffaCakes118

    • Size

      36KB

    • MD5

      dcb2de7b31f7b22fb6725c80d3d689e1

    • SHA1

      6b8d2a501e44a2cad0a2f65c67cc974b0779196e

    • SHA256

      c7d2ffce8289d1a8295282b670a6a9a93fc7f19e41304f26cadf3f45dd82c188

    • SHA512

      fee1a7f02bbd8c88070cb9c709155ecde9849aa03464e06e3bf2163f2e59341932df3f49a1ec78b3a4dfe2d2e13a437a39cec37f82bb558ce00241ec6d99152f

    • SSDEEP

      768:DlcTwpQJkYYTgOnHBqQTZqDsQw6AL7oh2q7vm6PrP2578NkbX:h8wyJnYEOH9ZqDw8h3bzPD2meX

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks