General
-
Target
02ce818d6d5c93552e9d6015b0d9b11d_JaffaCakes118
-
Size
86KB
-
Sample
240427-j5mcrsee68
-
MD5
02ce818d6d5c93552e9d6015b0d9b11d
-
SHA1
55183dcd20145c276d78ea88c954e26ddefc44f8
-
SHA256
1e85456d7f1576c117b41c909376899435a03af4ba1777e5a64a676dc4dbc7d6
-
SHA512
6eaeb38b68d72568300fa69143b1e6eeffd2814d23331fd6570f6dfa781dbe1d335769c2340db412537bce928ad10a49cd09abab5819c442e45d23b2e6c67836
-
SSDEEP
1536:jqwHHEPGQDpFHV7y0yxRK6o6KVeOiohn8vcDTV69n/HkRK6:pnE+QDpFBhWU6o/+cDTk9/EU6
Behavioral task
behavioral1
Sample
02ce818d6d5c93552e9d6015b0d9b11d_JaffaCakes118.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
02ce818d6d5c93552e9d6015b0d9b11d_JaffaCakes118.doc
Resource
win10v2004-20240426-en
Malware Config
Extracted
http://etone.org/ZbSUAIjA/
http://abacado.com/kNTpkTeS/
http://expertfriend.com/wedvGzYfx/
http://emaginate.com/UzEvOVeK/
http://gfine.com/OsdJ/
Targets
-
-
Target
02ce818d6d5c93552e9d6015b0d9b11d_JaffaCakes118
-
Size
86KB
-
MD5
02ce818d6d5c93552e9d6015b0d9b11d
-
SHA1
55183dcd20145c276d78ea88c954e26ddefc44f8
-
SHA256
1e85456d7f1576c117b41c909376899435a03af4ba1777e5a64a676dc4dbc7d6
-
SHA512
6eaeb38b68d72568300fa69143b1e6eeffd2814d23331fd6570f6dfa781dbe1d335769c2340db412537bce928ad10a49cd09abab5819c442e45d23b2e6c67836
-
SSDEEP
1536:jqwHHEPGQDpFHV7y0yxRK6o6KVeOiohn8vcDTV69n/HkRK6:pnE+QDpFBhWU6o/+cDTk9/EU6
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request
-