Overview

overview

8

Static

static

8

f57aa3bbe3...18.doc

windows7-x64

8

f57aa3bbe3...18.doc

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f57aa3bbe3fae170bdda042d979ed6a4_JaffaCakes118

  • Size

    37KB

  • Sample

    240417-lk3v5aba96

  • MD5

    f57aa3bbe3fae170bdda042d979ed6a4

  • SHA1

    ccefd52e896ea971d6dcf13e21eb7248e80db908

  • SHA256

    b9656022ed7793ea88b296d9cfc76922a75f962deec9e9edc627b4b108f8bc85

  • SHA512

    032ae1a8fc9522b56f4f5310b62940a028cc620dc19539c25d4d1342b82069c803c965dc4d4afe5b4b7c6d6cc3e9384167044d28be8b8e4e8b60f2cbed6f58d3

  • SSDEEP

    192:45KwpT858VR85SbWFwCLfyEzMv7v8xkqPG3Z869J36uxyb6Hqv5RZwQjv7bwpz:g8d7yEz0j8Fwt6uUkqv5AQjv

Score
8/10
macromacro_on_action

Malware Config

Targets

    • Target

      f57aa3bbe3fae170bdda042d979ed6a4_JaffaCakes118

    • Size

      37KB

    • MD5

      f57aa3bbe3fae170bdda042d979ed6a4

    • SHA1

      ccefd52e896ea971d6dcf13e21eb7248e80db908

    • SHA256

      b9656022ed7793ea88b296d9cfc76922a75f962deec9e9edc627b4b108f8bc85

    • SHA512

      032ae1a8fc9522b56f4f5310b62940a028cc620dc19539c25d4d1342b82069c803c965dc4d4afe5b4b7c6d6cc3e9384167044d28be8b8e4e8b60f2cbed6f58d3

    • SSDEEP

      192:45KwpT858VR85SbWFwCLfyEzMv7v8xkqPG3Z869J36uxyb6Hqv5RZwQjv7bwpz:g8d7yEz0j8Fwt6uUkqv5AQjv

    Score
    8/10
    macromacro_on_action

    • Office macro that triggers on suspicious action

      Office document macro which triggers in special circumstances - often malicious.

      macromacro_on_action

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks