Overview

overview

8

Static

static

3

15fdd5b5a5...18.exe

windows7-x64

3

15fdd5b5a5...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15fdd5b5a585f3023f1202996a72b5d1_JaffaCakes118

  • Size

    94KB

  • Sample

    241005-d2tpsaxcnh

  • MD5

    15fdd5b5a585f3023f1202996a72b5d1

  • SHA1

    cebcbb6fd0ea582bf9ab4a62fef4accf7f4cae66

  • SHA256

    db7dc2898f7ed6f8de0d0e3c8e4ede6ed6b1a184740db92c8b709fcc5641bfaf

  • SHA512

    8ae7b49d89e9f236bf0e6c797fc11206f781c32c55ee8b8969c230648866161afa3fecd2b28bdb8cefd6124ee24b46923ef878ebfc5a629f72df8c1d38b31617

  • SSDEEP

    1536:NqDyZS7ekgXkhBw33qplJosWQgfjIleYao+EzfjNmfb+zjpM8c8YaEJwZK4/83ZQ:8DiSK0hC6PJodxkZzJmfb+pM8hZEXtpo

Score
8/10
discovery

Malware Config

Targets

    • Target

      15fdd5b5a585f3023f1202996a72b5d1_JaffaCakes118

    • Size

      94KB

    • MD5

      15fdd5b5a585f3023f1202996a72b5d1

    • SHA1

      cebcbb6fd0ea582bf9ab4a62fef4accf7f4cae66

    • SHA256

      db7dc2898f7ed6f8de0d0e3c8e4ede6ed6b1a184740db92c8b709fcc5641bfaf

    • SHA512

      8ae7b49d89e9f236bf0e6c797fc11206f781c32c55ee8b8969c230648866161afa3fecd2b28bdb8cefd6124ee24b46923ef878ebfc5a629f72df8c1d38b31617

    • SSDEEP

      1536:NqDyZS7ekgXkhBw33qplJosWQgfjIleYao+EzfjNmfb+zjpM8c8YaEJwZK4/83ZQ:8DiSK0hC6PJodxkZzJmfb+pM8hZEXtpo

    Score
    8/10
    discovery

    • Contacts a large (567) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks