0ccc8f2a3c5892dff42fd581d9fa8a16a1f398b6106ff3cbef057e5700a384ed

General

Target

84ea419fa0af9f105d34478376ea2acc_JaffaCakes118
Size

10KB
Sample

240402-f6fd3aab95
MD5

84ea419fa0af9f105d34478376ea2acc
SHA1

4cc766fa2b5cf111edd9153586f65c7bd236e21f
SHA256

0ccc8f2a3c5892dff42fd581d9fa8a16a1f398b6106ff3cbef057e5700a384ed
SHA512

decfbc264c190e540ec4a92b4c9799ca8ac70684155370df92eff82f04316d4c977657519010aac7cadb71bf2b727e86bc3f66e03e5dfb80b03c5693ce6cd6a5
SSDEEP

192:ScIMmtPWQjG/b+rcafbOfYrU25SEzBC4vNqH9Rcm3O6eN:SPXlGT+ObEhlqHtO6u

Score

10^/10

websettings

Malware Config

Extracted

Rule

Microsoft Office WebSettings Relationship

C2

http://192.210.149.241/..--........................-......-----wiz............----..-...........wiz/..-.......................---.-.-.-................wiz......wi......-..wiz

Targets

- Target
  
  84ea419fa0af9f105d34478376ea2acc_JaffaCakes118
- Size
  
  10KB
- MD5
  
  84ea419fa0af9f105d34478376ea2acc
- SHA1
  
  4cc766fa2b5cf111edd9153586f65c7bd236e21f
- SHA256
  
  0ccc8f2a3c5892dff42fd581d9fa8a16a1f398b6106ff3cbef057e5700a384ed
- SHA512
  
  decfbc264c190e540ec4a92b4c9799ca8ac70684155370df92eff82f04316d4c977657519010aac7cadb71bf2b727e86bc3f66e03e5dfb80b03c5693ce6cd6a5
- SSDEEP
  
  192:ScIMmtPWQjG/b+rcafbOfYrU25SEzBC4vNqH9Rcm3O6eN:SPXlGT+ObEhlqHtO6u
Score

7^/10
- Abuses OpenXML format to download file from external location
behavioral1 behavioral2