Overview

overview

7

Static

static

3

433c69a597...18.exe

windows7-x64

7

433c69a597...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    433c69a5974944f4ca607d743718e850_JaffaCakes118

  • Size

    385KB

  • Sample

    241014-vh5flszcpm

  • MD5

    433c69a5974944f4ca607d743718e850

  • SHA1

    aeb0bb6506e258c4027f62bb1184ecf406ea1957

  • SHA256

    853d03e3895aa203b5b698c5b037a71275453eb255f51639bbb20ebb7420d920

  • SHA512

    b0d69185abffbf85068175b1c964c8a054c8959f1aa98155aa1e6dadfbe0872fc3d2c4bca5b49549aa52f79a382c67e904d1d799908f43440e705298a6267b7f

  • SSDEEP

    12288:bi/OjtaNPEfoZPnp3TuEkRAiVQpLRGwenERegrB:bi/OhaCap3cQpUHnEjB

Score
7/10
discovery

Malware Config

Targets

    • Target

      433c69a5974944f4ca607d743718e850_JaffaCakes118

    • Size

      385KB

    • MD5

      433c69a5974944f4ca607d743718e850

    • SHA1

      aeb0bb6506e258c4027f62bb1184ecf406ea1957

    • SHA256

      853d03e3895aa203b5b698c5b037a71275453eb255f51639bbb20ebb7420d920

    • SHA512

      b0d69185abffbf85068175b1c964c8a054c8959f1aa98155aa1e6dadfbe0872fc3d2c4bca5b49549aa52f79a382c67e904d1d799908f43440e705298a6267b7f

    • SSDEEP

      12288:bi/OjtaNPEfoZPnp3TuEkRAiVQpLRGwenERegrB:bi/OhaCap3cQpUHnEjB

    Score
    7/10
    discovery

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks