General

  • Target
    jaffacakes118_d1a1396300ac2b54ae4f0b5699cf01f5af1d58b70e9771e6ef7b6a404d524a0b.bin
  • Size 49KB
  • Sample260930-lrpl3st1ex
  • SHA256 d1a1396300ac2b54ae4f0b5699cf01f5af1d58b70e9771e6ef7b6a404d524a0b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      jaffacakes118_d1a1396300ac2b54ae4f0b5699cf01f5af1d58b70e9771e6ef7b6a404d524a0b.bin
    • Size 49KB
    • SHA256 d1a1396300ac2b54ae4f0b5699cf01f5af1d58b70e9771e6ef7b6a404d524a0b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks