Overview

overview

7

Static

static

3

0e661713f9...18.exe

windows7-x64

7

0e661713f9...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0e661713f95b09b2b4a03f6b0244ea37_JaffaCakes118

  • Size

    36KB

  • Sample

    241003-hd8agszbrl

  • MD5

    0e661713f95b09b2b4a03f6b0244ea37

  • SHA1

    66e15e4a393a758b514cb63292457abf13189b5c

  • SHA256

    fe1fbe65ae3b9491efdde3ac6017c7ece40ac332bb70242bdd1148a1ea4b1c56

  • SHA512

    a5f61037c9cddf77859516bea13dd6b18207addaed895352e457debec65a44c931c9d898dd981c530111df54cfffeb7b553d3433a1d74d8268c8aa3759174e80

  • SSDEEP

    768:DlcTwpQJkYYTgOnHBqQTZqDsQw6AL7oh2q7vm6PrP2578Nkb8:h8wyJnYEOH9ZqDw8h3bzPD2me8

Score
7/10
discovery

Malware Config

Targets

    • Target

      0e661713f95b09b2b4a03f6b0244ea37_JaffaCakes118

    • Size

      36KB

    • MD5

      0e661713f95b09b2b4a03f6b0244ea37

    • SHA1

      66e15e4a393a758b514cb63292457abf13189b5c

    • SHA256

      fe1fbe65ae3b9491efdde3ac6017c7ece40ac332bb70242bdd1148a1ea4b1c56

    • SHA512

      a5f61037c9cddf77859516bea13dd6b18207addaed895352e457debec65a44c931c9d898dd981c530111df54cfffeb7b553d3433a1d74d8268c8aa3759174e80

    • SSDEEP

      768:DlcTwpQJkYYTgOnHBqQTZqDsQw6AL7oh2q7vm6PrP2578Nkb8:h8wyJnYEOH9ZqDw8h3bzPD2me8

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks