General

  • Target
    69a741123d824a9b290ac9b210dcbd58_JaffaCakes118
  • Size 247KB
  • Sample240401-gpshqsfe97
  • SHA256 1b9d6794f8df32779ea02105e8feff3a9308ac3a629a34097f65a915fe3a4184
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Language
  • xlm4.0

Source
URLs
  • xlm40.dropper

    https://samtnpy.org/bveCGKTX/ghb.html

  • xlm40.dropper

    https://massngo.org/dXKvyKV9v8c/ghb.html

  • xlm40.dropper

    https://vathiriyar.org/uy0Tk0keJUr/ghb.html

Extracted

Language
  • xlm4.0

Source
URLs
  • xlm40.dropper

    https://samtnpy.org/bveCGKTX/ghb.html

  • xlm40.dropper

    https://massngo.org/dXKvyKV9v8c/ghb.html

  • xlm40.dropper

    https://vathiriyar.org/uy0Tk0keJUr/ghb.html

Targets

    • Target
      69a741123d824a9b290ac9b210dcbd58_JaffaCakes118
    • Size 247KB
    • SHA256 1b9d6794f8df32779ea02105e8feff3a9308ac3a629a34097f65a915fe3a4184
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

MITRE ATT&CK Enterprise v15

Tasks