Overview

overview

10

Static

static

10

JaffaCakes...63.exe

windows7-x64

6

JaffaCakes...63.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_f0da2d4e9fb86b17d441aa151c783a63

  • Size

    403KB

  • Sample

    250110-282wqsvmfk

  • MD5

    f0da2d4e9fb86b17d441aa151c783a63

  • SHA1

    f925eca11fe1804b7aec7b1a57e580c94f6585a6

  • SHA256

    99b22b6b668ec9e90d93caa42237dfa8e37259d56d824e5ba50d97633d23ebd5

  • SHA512

    7b9e4a4248e6bd65bf69949391258dfb313c74948f3c0bf6a5f397a0892d9a6471433376c27bd04c86f786987a7fa315e6d5908533efa41e41e63931f5768bef

  • SSDEEP

    6144:SqJj3bQ/UCg7m1ugavIv1pE0EAPMrGWsWDWidF0HQszCZ2Ftppb9Y81+k7pq7FLE:Sql3k/b1ugaUS2zt

Score
10/10
privateloaderdiscoveryloader

Malware Config

Extracted

Family

privateloader

C2

http://45.133.1.107/server.txt

pastebin.com/raw/A7dSG1te

http://wfsdragon.ru/api/setStats.php

51.178.186.149

Targets

    • Target

      JaffaCakes118_f0da2d4e9fb86b17d441aa151c783a63

    • Size

      403KB

    • MD5

      f0da2d4e9fb86b17d441aa151c783a63

    • SHA1

      f925eca11fe1804b7aec7b1a57e580c94f6585a6

    • SHA256

      99b22b6b668ec9e90d93caa42237dfa8e37259d56d824e5ba50d97633d23ebd5

    • SHA512

      7b9e4a4248e6bd65bf69949391258dfb313c74948f3c0bf6a5f397a0892d9a6471433376c27bd04c86f786987a7fa315e6d5908533efa41e41e63931f5768bef

    • SSDEEP

      6144:SqJj3bQ/UCg7m1ugavIv1pE0EAPMrGWsWDWidF0HQszCZ2Ftppb9Y81+k7pq7FLE:Sql3k/b1ugaUS2zt

    Score
    6/10
    discovery

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks