Overview

overview

10

Static

static

1

ed9b7376ca...8.xlam

windows7-x64

10

ed9b7376ca...8.xlam

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ed9b7376ca01004f0182fecc07bc976c_JaffaCakes118

  • Size

    19KB

  • Sample

    240411-rhr9hagc5w

  • MD5

    ed9b7376ca01004f0182fecc07bc976c

  • SHA1

    89063a1d295205ff7dabe3907a5eb4fa58c2cdbd

  • SHA256

    06c8eee579b1246d3ffe97ea63a2adeb9e8b3d376e3c344a359b314da135d9f5

  • SHA512

    6a7f41a212e1060821eff23e02e3b1a7f4df247a8e3031fe34d935b240d5eb360c2dc84a2f0e079f92da7551f36f68491da9940d1c55580aacd0af5baa69e70c

  • SSDEEP

    384:AKkoDdl4ZBf2YpcRCJJiik51FZoNu2ZWSytxw5/7bUuz:AKkoplyuYpcRoJR2FZoUfcnUuz

Score
10/10

Malware Config

Targets

    • Target

      ed9b7376ca01004f0182fecc07bc976c_JaffaCakes118

    • Size

      19KB

    • MD5

      ed9b7376ca01004f0182fecc07bc976c

    • SHA1

      89063a1d295205ff7dabe3907a5eb4fa58c2cdbd

    • SHA256

      06c8eee579b1246d3ffe97ea63a2adeb9e8b3d376e3c344a359b314da135d9f5

    • SHA512

      6a7f41a212e1060821eff23e02e3b1a7f4df247a8e3031fe34d935b240d5eb360c2dc84a2f0e079f92da7551f36f68491da9940d1c55580aacd0af5baa69e70c

    • SSDEEP

      384:AKkoDdl4ZBf2YpcRCJJiik51FZoNu2ZWSytxw5/7bUuz:AKkoplyuYpcRoJR2FZoUfcnUuz

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks