Overview

overview

7

Static

static

3

e0359a8588...18.exe

windows7-x64

7

e0359a8588...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    e0359a858807fbb4d9bf0696d940353c_JaffaCakes118

  • Size

    92KB

  • Sample

    240914-py7m1sthjn

  • MD5

    e0359a858807fbb4d9bf0696d940353c

  • SHA1

    40e303665773153de9de7e7e9403c3c623f676f9

  • SHA256

    8ce65b73f1230c072f444aeb1c233404115a3169f735244c82d2e50a676502a0

  • SHA512

    fee0cc3736c758644c8a61de6ed03f17ca4f6483bd5c4210ed57f61afd8413abe3e8a477b8097651d91a2b153836d6177a4ef5e45a4a9d3e7a801188b83e2a89

  • SSDEEP

    1536:W7FDGo4K9Ty+ihfQxtQg1nhFc9pJpk+tCwmg+Q6buWkJ2/tnJs1vk1PsG4evCuJs:yDGACQxjJGJpTP65vFJOEvCas

Score
7/10
discovery

Malware Config

Targets

    • Target

      e0359a858807fbb4d9bf0696d940353c_JaffaCakes118

    • Size

      92KB

    • MD5

      e0359a858807fbb4d9bf0696d940353c

    • SHA1

      40e303665773153de9de7e7e9403c3c623f676f9

    • SHA256

      8ce65b73f1230c072f444aeb1c233404115a3169f735244c82d2e50a676502a0

    • SHA512

      fee0cc3736c758644c8a61de6ed03f17ca4f6483bd5c4210ed57f61afd8413abe3e8a477b8097651d91a2b153836d6177a4ef5e45a4a9d3e7a801188b83e2a89

    • SSDEEP

      1536:W7FDGo4K9Ty+ihfQxtQg1nhFc9pJpk+tCwmg+Q6buWkJ2/tnJs1vk1PsG4evCuJs:yDGACQxjJGJpTP65vFJOEvCas

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks