General

  • Target
    jaffacakes118_030b586dafe9abbe878997cf09bf439d7561ce0f644cf8573359ee8739a4dde5.bin
  • Size 68KB
  • Sample260910-kxhv2stwfv
  • SHA256 030b586dafe9abbe878997cf09bf439d7561ce0f644cf8573359ee8739a4dde5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Targets

    • Target
      jaffacakes118_030b586dafe9abbe878997cf09bf439d7561ce0f644cf8573359ee8739a4dde5.bin
    • Size 68KB
    • SHA256 030b586dafe9abbe878997cf09bf439d7561ce0f644cf8573359ee8739a4dde5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Contacts a large (11738) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Renames itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

MITRE ATT&CK Enterprise v16

Tasks