General
-
Target
27d3cc774970625c5e64dfe2e0b76f04_JaffaCakes118
-
Size
190KB
-
Sample
240509-cs1w3aga32
-
MD5
27d3cc774970625c5e64dfe2e0b76f04
-
SHA1
ff436c6b434f5219c8f467cf43206fbc0f304d51
-
SHA256
35e34300ab10fbfe1170498fd9dfd74c724196f3a6c7e0c94b6c24246b6857d5
-
SHA512
3052495cf40bdeebf5712983712b10bbd7778362b595b853981371e48d5380ea7bce6f37505589d21c2405d55686bc7fc8557ff8e3d5252cdfd0e706c4d43baf
-
SSDEEP
3072:i9ufstRUUKSns8T00JSHUgteMJ8qMD7gj20zKNf9cfmfE7qdmVJKk/Juvc5a8a8R:i9ufsfgIf0pLxKb2
Static task
static1
Behavioral task
behavioral1
Sample
27d3cc774970625c5e64dfe2e0b76f04_JaffaCakes118.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
27d3cc774970625c5e64dfe2e0b76f04_JaffaCakes118.doc
Resource
win10v2004-20240426-en
Malware Config
Extracted
http://reklamdasiniz.com/wp-admin/W/
http://www.paramedicaleducationguidelines.com/wp-admin/7S/
http://bimasoftcbt.maannajahjakarta.com/wp-admin/i3K/
http://casualhome.com/wp-admin/Y/
https://aemine.vn/wp-admin/KMq/
http://aahnaturals.net/wp-includes/A3/
https://sbsec.org/bsadmin-portal/1nf/
Targets
-
-
Target
27d3cc774970625c5e64dfe2e0b76f04_JaffaCakes118
-
Size
190KB
-
MD5
27d3cc774970625c5e64dfe2e0b76f04
-
SHA1
ff436c6b434f5219c8f467cf43206fbc0f304d51
-
SHA256
35e34300ab10fbfe1170498fd9dfd74c724196f3a6c7e0c94b6c24246b6857d5
-
SHA512
3052495cf40bdeebf5712983712b10bbd7778362b595b853981371e48d5380ea7bce6f37505589d21c2405d55686bc7fc8557ff8e3d5252cdfd0e706c4d43baf
-
SSDEEP
3072:i9ufstRUUKSns8T00JSHUgteMJ8qMD7gj20zKNf9cfmfE7qdmVJKk/Juvc5a8a8R:i9ufsfgIf0pLxKb2
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request
-