Overview

overview

8

Static

static

8

0316284f83...18.doc

windows7-x64

1

0316284f83...18.doc

windows10-2004-x64

1

decrypted.xlam

windows7-x64

8

decrypted.xlam

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0316284f836c4cf6d877a6ac1b40d597_JaffaCakes118

  • Size

    436KB

  • MD5

    0316284f836c4cf6d877a6ac1b40d597

  • SHA1

    c09b7818616d35b19072d508f101fc1ebe7e68aa

  • SHA256

    5399db990c923676dda657b10d388839fceb0bc0670f7c536fde74475250c067

  • SHA512

    46b311d798956c84bdfe4caacb3af5573b25412c9671be93b6c6de7f840aa0ecbc85dfd57052761f69481d2dce791661e3443393d3f3cb8fe0feddd8167ea9b3

  • SSDEEP

    12288:tU4/+/gyXzvh2iFnwBWScVKM2tUN1lsmEMtEV23G6nm:tB/YLz7no+D2tQKmEMgKm

Score
8/10
macro

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

    macro

Files

  • 0316284f836c4cf6d877a6ac1b40d597_JaffaCakes118
    .doc windows office2003

    Password: VelvetSweatshop

  • decrypted
    .xlam office2007

    ThisWorkbook

    Sheet1

    Sheet2

    Sheet3