Overview

overview

8

Static

static

8

f02841ed25...18.doc

windows7-x64

8

f02841ed25...18.doc

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f02841ed25cb91d84a84c2d379697f86_JaffaCakes118

  • Size

    38KB

  • Sample

    240415-dl7lpsda64

  • MD5

    f02841ed25cb91d84a84c2d379697f86

  • SHA1

    fff4ca3b79dce7a6f60ec7bb79c652f7117a5cd5

  • SHA256

    c658914adf6e68cdd7f5f1f45ac424c52358f6a29ca568cd981aa3f02af10748

  • SHA512

    51b3f3218b072979b7cb3bba5ea8c1caff3460ac5f7a9fc93ee0ed13f95026de0d6edd743ce1dad6a69d432acdbe16fd213581248ab300074f62f1c25ef2caa2

  • SSDEEP

    384:S9aCLZN+aL2fLNaXvQhi+qg1qLy06ubk+z5FQ24:StPMNaXvQs+q8nX+z5FQ2

Score
8/10
macromacro_on_action

Malware Config

Targets

    • Target

      f02841ed25cb91d84a84c2d379697f86_JaffaCakes118

    • Size

      38KB

    • MD5

      f02841ed25cb91d84a84c2d379697f86

    • SHA1

      fff4ca3b79dce7a6f60ec7bb79c652f7117a5cd5

    • SHA256

      c658914adf6e68cdd7f5f1f45ac424c52358f6a29ca568cd981aa3f02af10748

    • SHA512

      51b3f3218b072979b7cb3bba5ea8c1caff3460ac5f7a9fc93ee0ed13f95026de0d6edd743ce1dad6a69d432acdbe16fd213581248ab300074f62f1c25ef2caa2

    • SSDEEP

      384:S9aCLZN+aL2fLNaXvQhi+qg1qLy06ubk+z5FQ24:StPMNaXvQs+q8nX+z5FQ2

    Score
    8/10
    macromacro_on_action

    • Office macro that triggers on suspicious action

      Office document macro which triggers in special circumstances - often malicious.

      macromacro_on_action

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks