General

  • Target
    jaffacakes118_91f8d5c2f7a61485cdb5e72740b01274032a49ee358b9794c7fa31aed056c562.bin
  • Size 134KB
  • Sample260910-re2nrsvbmg
  • SHA256 91f8d5c2f7a61485cdb5e72740b01274032a49ee358b9794c7fa31aed056c562
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Targets

    • Target
      jaffacakes118_91f8d5c2f7a61485cdb5e72740b01274032a49ee358b9794c7fa31aed056c562.bin
    • Size 134KB
    • SHA256 91f8d5c2f7a61485cdb5e72740b01274032a49ee358b9794c7fa31aed056c562
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Contacts a large (265735) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Renames itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

MITRE ATT&CK Enterprise v16

Tasks