Overview

overview

8

Static

static

8

00a08f2781...18.doc

windows7-x64

1

00a08f2781...18.doc

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00a08f27819dbf234abec402e887d1b6_JaffaCakes118

  • Size

    76KB

  • Sample

    240426-m7v98sfa71

  • MD5

    00a08f27819dbf234abec402e887d1b6

  • SHA1

    a49a4941bae60b495d1339e2d2c8c70684067779

  • SHA256

    25a1b63ed35dd91174f27db0d488e60a7266a02d98bb6e7fb974c5ee5b5d3032

  • SHA512

    94e0d40e10be61c329047bb831449626e10de12597fb08934e003f5bd94f0c86b87f341e1becc8e7470ee3950151264678b9ccab8e27dd48f20a9f9553a2d7c5

  • SSDEEP

    1536:UqwHHEPGQDpFHV7y0ypHVXhbXZ6GWmvJ63:onE+QDpFBhoxbRvE

Score
8/10
macro

Malware Config

Targets

    • Target

      00a08f27819dbf234abec402e887d1b6_JaffaCakes118

    • Size

      76KB

    • MD5

      00a08f27819dbf234abec402e887d1b6

    • SHA1

      a49a4941bae60b495d1339e2d2c8c70684067779

    • SHA256

      25a1b63ed35dd91174f27db0d488e60a7266a02d98bb6e7fb974c5ee5b5d3032

    • SHA512

      94e0d40e10be61c329047bb831449626e10de12597fb08934e003f5bd94f0c86b87f341e1becc8e7470ee3950151264678b9ccab8e27dd48f20a9f9553a2d7c5

    • SSDEEP

      1536:UqwHHEPGQDpFHV7y0ypHVXhbXZ6GWmvJ63:onE+QDpFBhoxbRvE

    Score
    6/10

    • Process spawned suspicious child process

      This child process is typically not spawned unless (for example) the parent process crashes. This typically indicates the parent process was unsuccessfully compromised.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks