Overview

overview

10

Static

static

3

f33cdae0ae...18.exe

windows7-x64

10

f33cdae0ae...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f33cdae0ae562cb6ba8909925f06064c_JaffaCakes118

  • Size

    152KB

  • Sample

    240924-kfxymsxeqk

  • MD5

    f33cdae0ae562cb6ba8909925f06064c

  • SHA1

    5a9718e2050b803aeb47ef0dc025983d8c40acad

  • SHA256

    7d1bac0361b9088beb7439391b3ccbe6264581c86f8b53d14ef3c732fae39c50

  • SHA512

    67b87c97580a8e5ffd56f9548d00e94b2e2d9fb8eb55889520f921ff9cecdfa57a8ba27270aa2bdcd6731e64b774c5a5206ce226b2b9e14fdc9808e235d935a5

  • SSDEEP

    3072:Ql2y8sf5WBmz8X/iSJ7Ws730xYvG1sFs9X:Xy9f4H/ivsb0xkT

Score
10/10
emotetbankerdiscoverytrojan

Malware Config

Targets

    • Target

      f33cdae0ae562cb6ba8909925f06064c_JaffaCakes118

    • Size

      152KB

    • MD5

      f33cdae0ae562cb6ba8909925f06064c

    • SHA1

      5a9718e2050b803aeb47ef0dc025983d8c40acad

    • SHA256

      7d1bac0361b9088beb7439391b3ccbe6264581c86f8b53d14ef3c732fae39c50

    • SHA512

      67b87c97580a8e5ffd56f9548d00e94b2e2d9fb8eb55889520f921ff9cecdfa57a8ba27270aa2bdcd6731e64b774c5a5206ce226b2b9e14fdc9808e235d935a5

    • SSDEEP

      3072:Ql2y8sf5WBmz8X/iSJ7Ws730xYvG1sFs9X:Xy9f4H/ivsb0xkT

    Score
    10/10
    emotetbankerdiscoverytrojan

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

      trojanbankeremotet

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks