Overview

overview

8

Static

static

3

5656934792...18.exe

windows7-x64

3

5656934792...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56569347924350649672283b26218e50_JaffaCakes118

  • Size

    63KB

  • Sample

    241018-j1yv1ayerr

  • MD5

    56569347924350649672283b26218e50

  • SHA1

    a98cb24ade7df93d06190b03186af72b8b7daa40

  • SHA256

    21096e58a3ebb648f20dce61ebda43fc652a8e53fb2df4c320af2e6628b0f29d

  • SHA512

    70df2844874102246c4b8a0fef479dbd1b927fbccfc72da52b630eba115d7a6da3517bfe1608adb0844aaeb338032e514e42c45f02f34de45d8c82bc11a08e4d

  • SSDEEP

    1536:Y2ZfFiL3xUQFRyBGmDOjp71gvqZVzEZMjsrsaX:Y443xUSR6GmDOjF1gBPX

Score
8/10
discovery

Malware Config

Targets

    • Target

      56569347924350649672283b26218e50_JaffaCakes118

    • Size

      63KB

    • MD5

      56569347924350649672283b26218e50

    • SHA1

      a98cb24ade7df93d06190b03186af72b8b7daa40

    • SHA256

      21096e58a3ebb648f20dce61ebda43fc652a8e53fb2df4c320af2e6628b0f29d

    • SHA512

      70df2844874102246c4b8a0fef479dbd1b927fbccfc72da52b630eba115d7a6da3517bfe1608adb0844aaeb338032e514e42c45f02f34de45d8c82bc11a08e4d

    • SSDEEP

      1536:Y2ZfFiL3xUQFRyBGmDOjp71gvqZVzEZMjsrsaX:Y443xUSR6GmDOjF1gBPX

    Score
    8/10
    discovery

    • Contacts a large (514) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Deletes itself

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks