Overview

overview

7

Static

static

3

5708a50b72...18.exe

windows7-x64

7

5708a50b72...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5708a50b72ed61ea57d21a11d0ff9260_JaffaCakes118

  • Size

    112KB

  • Sample

    241018-myq9xssgpd

  • MD5

    5708a50b72ed61ea57d21a11d0ff9260

  • SHA1

    d41e2931d5f7a595253e65eeca27a12940b948b2

  • SHA256

    8983f6c89f99d99042d339ed0622d120418276ec1f1d0e5444d9d3e8e12ba2af

  • SHA512

    722da46b53e4d5f9ac030c7086c1ac63ab3f390383fe9a7365bcddba98b506f826d8b4412faf53089a63540423bb6beb2d7148399ddf794f50a1c409995f52e9

  • SSDEEP

    1536:LPqKgbwDeVyAUHwGvVJrYJeyxWxVhkITI5ywWFfB8lBTxe5P1PU:9gbwDKyLwGvTrYkg6BJR6ns5PFU

Score
7/10
discovery

Malware Config

Targets

    • Target

      5708a50b72ed61ea57d21a11d0ff9260_JaffaCakes118

    • Size

      112KB

    • MD5

      5708a50b72ed61ea57d21a11d0ff9260

    • SHA1

      d41e2931d5f7a595253e65eeca27a12940b948b2

    • SHA256

      8983f6c89f99d99042d339ed0622d120418276ec1f1d0e5444d9d3e8e12ba2af

    • SHA512

      722da46b53e4d5f9ac030c7086c1ac63ab3f390383fe9a7365bcddba98b506f826d8b4412faf53089a63540423bb6beb2d7148399ddf794f50a1c409995f52e9

    • SSDEEP

      1536:LPqKgbwDeVyAUHwGvVJrYJeyxWxVhkITI5ywWFfB8lBTxe5P1PU:9gbwDKyLwGvTrYkg6BJR6ns5PFU

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks