General
-
Target
25187f1a0c61dd484e43ccfbbea0d8dd_JaffaCakes118
-
Size
45KB
-
Sample
240329-sdapbsah9v
-
MD5
25187f1a0c61dd484e43ccfbbea0d8dd
-
SHA1
2f57d6fa7cdc407dd7e13f8d82ba385054bf09ea
-
SHA256
08e3da6d2868bb292f81e3580b1686a34fc5c25051f2c9601671f35873688307
-
SHA512
55b51b13c2220bbf2c52163fc4ff264946674f04fb1802fa9d26643ce74d6b1783218d1798985dae0dad6744f857e2faa0448a2ee845408f0adac76bd9ad28ed
-
SSDEEP
384:PqkJ3chjvoxKJ2LUa8c4yDMLiyGcS2rA6VsEEMc+iOQazItyfeX0juR4Db3fntb1:PcFAYU4yEnrhsEjcc2R8rzm
Behavioral task
behavioral1
Sample
25187f1a0c61dd484e43ccfbbea0d8dd_JaffaCakes118.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
25187f1a0c61dd484e43ccfbbea0d8dd_JaffaCakes118.doc
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
25187f1a0c61dd484e43ccfbbea0d8dd_JaffaCakes118
-
Size
45KB
-
MD5
25187f1a0c61dd484e43ccfbbea0d8dd
-
SHA1
2f57d6fa7cdc407dd7e13f8d82ba385054bf09ea
-
SHA256
08e3da6d2868bb292f81e3580b1686a34fc5c25051f2c9601671f35873688307
-
SHA512
55b51b13c2220bbf2c52163fc4ff264946674f04fb1802fa9d26643ce74d6b1783218d1798985dae0dad6744f857e2faa0448a2ee845408f0adac76bd9ad28ed
-
SSDEEP
384:PqkJ3chjvoxKJ2LUa8c4yDMLiyGcS2rA6VsEEMc+iOQazItyfeX0juR4Db3fntb1:PcFAYU4yEnrhsEjcc2R8rzm
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request
-