General

  • Target

    86dfb61ac300799295821b557178917f_JaffaCakes118

  • Size

    126KB

  • Sample

    241123-wyck7szldw

  • MD5

    86dfb61ac300799295821b557178917f

  • SHA1

    ec17fc8eda8b89a5f6e529470b4ce558de157977

  • SHA256

    2c1e800f0216614a18941b72b5c78210bdd1155beff130152504c5e881676eca

  • SHA512

    53dae5ec45f0a07db08ae3a487abb0e2d602bda3575ac33c78cb5c7108b65c444ce29b9a6c97ebdf8ca3d9d043aed430c46c1782f1973b8c1ce5aef574d4de77

  • SSDEEP

    3072:xWFnm78Un+Safqa5zjM9qH34bk4xM8Ee6DFMe6efGYZAD:xWFmALpzQ9qH3Qko9x62e6hL

Malware Config

Targets

    • Target

      dhl_paket_800265025637644__ID__897554538859215HVY___LD_V__G05_06_2015___MCF07_17_15.exe

    • Size

      188KB

    • MD5

      6cef1b3abfb99254cb67118381c33822

    • SHA1

      25f43623eba83aa33d85016bb1d94e09ae635d83

    • SHA256

      d742d24cc4a615bdfc5b5546153bcd565a6ccafe313b04da80bca6e09100841b

    • SHA512

      9a31fbd727c55cc69e53281069d26f65127ccd69cab20cc0d716f42bbaf2308ed970fa39a14f52852dbc53d5c00459ef2e9f7c75b607a880a8679f8cf537c761

    • SSDEEP

      3072:Ipe/rgTsjXUmVAi60q81F4zjM9qH34bk4xM8ie6DFMe6MbDw1gb:2eMcfo0qqF4zQ9qH3Qko9D62e6KDw10

    • Detect Emotet payload

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Emotet family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks