General

  • Target

    JaffaCakes118_4937b83cc6eb650b5c96beefbe91e6c0

  • Size

    172KB

  • Sample

    250101-gdcyxaynfp

  • MD5

    4937b83cc6eb650b5c96beefbe91e6c0

  • SHA1

    587306b63e19755652ca4d7de958aaf3ee78bc2a

  • SHA256

    7f311272c9b8260718edb0aaf7c356287efed9d1ee8d5b591d8e35be927e78fe

  • SHA512

    652971ff8c8b250c3c2c67e8d731e15d023068a90e34d040c1aa8e57524fa2869e6c3ed706f50e3738b2815669897b752456f735e1a8dfdcc617823cd2d76f0f

  • SSDEEP

    3072:lIaKSZACbEOKdv24MpQozvrSEYcKEdGOUBrvMwFccN25b2:l/IOOO44PvrSTqdGOqVFBM6

Malware Config

Targets

    • Target

      JaffaCakes118_4937b83cc6eb650b5c96beefbe91e6c0

    • Size

      172KB

    • MD5

      4937b83cc6eb650b5c96beefbe91e6c0

    • SHA1

      587306b63e19755652ca4d7de958aaf3ee78bc2a

    • SHA256

      7f311272c9b8260718edb0aaf7c356287efed9d1ee8d5b591d8e35be927e78fe

    • SHA512

      652971ff8c8b250c3c2c67e8d731e15d023068a90e34d040c1aa8e57524fa2869e6c3ed706f50e3738b2815669897b752456f735e1a8dfdcc617823cd2d76f0f

    • SSDEEP

      3072:lIaKSZACbEOKdv24MpQozvrSEYcKEdGOUBrvMwFccN25b2:l/IOOO44PvrSTqdGOqVFBM6

    • Detect Emotet payload

    • Emotet

      Emotet is a trojan that is primarily spread through spam emails.

    • Emotet family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks