Overview

overview

10

Static

static

8

22ef5e495d...18.doc

windows7-x64

10

22ef5e495d...18.doc

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    22ef5e495d161a3df52a2e3212da60d0_JaffaCakes118

  • Size

    75KB

  • Sample

    240508-dmq1cafe8t

  • MD5

    22ef5e495d161a3df52a2e3212da60d0

  • SHA1

    16e803fc073a55c587c1786ebce06b3f0b16f2f7

  • SHA256

    d66c21e2f60e2d27d3120457f9985791253e4e67df66a0f7efda961788005c06

  • SHA512

    7dee8e5aeb1fc4a142de72ac43e2536fd18668b822d2d1864e5de89c8958dbb3fad3355353a4b7ba628c2fbcb6989a2c66afe3ddd2557e31dfe13aceabe5b60a

  • SSDEEP

    768:SUgysVucRFoqkp59YBvLdTv9ReVi4eFov5UHRFBt+1o9rRosPVVjKH1vk7Z1L:pgysocn1kp59gxBK85fBt+a99rVcVYv

Score
10/10
macro

Malware Config

Targets

    • Target

      22ef5e495d161a3df52a2e3212da60d0_JaffaCakes118

    • Size

      75KB

    • MD5

      22ef5e495d161a3df52a2e3212da60d0

    • SHA1

      16e803fc073a55c587c1786ebce06b3f0b16f2f7

    • SHA256

      d66c21e2f60e2d27d3120457f9985791253e4e67df66a0f7efda961788005c06

    • SHA512

      7dee8e5aeb1fc4a142de72ac43e2536fd18668b822d2d1864e5de89c8958dbb3fad3355353a4b7ba628c2fbcb6989a2c66afe3ddd2557e31dfe13aceabe5b60a

    • SSDEEP

      768:SUgysVucRFoqkp59YBvLdTv9ReVi4eFov5UHRFBt+1o9rRosPVVjKH1vk7Z1L:pgysocn1kp59gxBK85fBt+a99rVcVYv

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks