Overview

overview

8

Static

static

1

f9043c6c86...18.doc

windows7-x64

7

f9043c6c86...18.doc

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f9043c6c86a64da0b7d09aa71d721ff7_JaffaCakes118

  • Size

    42KB

  • Sample

    240418-3r1ssabd7z

  • MD5

    f9043c6c86a64da0b7d09aa71d721ff7

  • SHA1

    34435e3c1b40983bd41db4b90c64e0aa5e66fc72

  • SHA256

    1675fd99de7d62c5ff0843a93942a0744fa0de1d8331efe2114894ec7f70420a

  • SHA512

    4d4b646a3836a85dac105a0b00d739adfe4ee1d1a9409d06ac0bbd393a7210de941ba9eb7a70c43e22a06ea7e7c574bc3efbffc0e1192215d33ae568ed883497

  • SSDEEP

    384:Y3+xWo9kC8kJJwUkECOn42J+G8fZmqQpvtMwLvfWlzvKM1VLvfI:Y3+xNvJF/JBoZm3pqGvfWvfI

Score
8/10
macromacro_on_action

Malware Config

Targets

    • Target

      f9043c6c86a64da0b7d09aa71d721ff7_JaffaCakes118

    • Size

      42KB

    • MD5

      f9043c6c86a64da0b7d09aa71d721ff7

    • SHA1

      34435e3c1b40983bd41db4b90c64e0aa5e66fc72

    • SHA256

      1675fd99de7d62c5ff0843a93942a0744fa0de1d8331efe2114894ec7f70420a

    • SHA512

      4d4b646a3836a85dac105a0b00d739adfe4ee1d1a9409d06ac0bbd393a7210de941ba9eb7a70c43e22a06ea7e7c574bc3efbffc0e1192215d33ae568ed883497

    • SSDEEP

      384:Y3+xWo9kC8kJJwUkECOn42J+G8fZmqQpvtMwLvfWlzvKM1VLvfI:Y3+xNvJF/JBoZm3pqGvfWvfI

    Score
    8/10
    macromacro_on_action

    • Office macro that triggers on suspicious action

      Office document macro which triggers in special circumstances - often malicious.

      macromacro_on_action

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks