Overview

overview

10

Static

static

8

375fb1c82e...18.doc

windows7-x64

10

375fb1c82e...18.doc

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    375fb1c82e6dbe8d6b3ef2b2bffb73a6_JaffaCakes118

  • Size

    315KB

  • Sample

    240512-a397dagd5s

  • MD5

    375fb1c82e6dbe8d6b3ef2b2bffb73a6

  • SHA1

    227d2126f31503ceaa73254dae6a1d50b62f3f3f

  • SHA256

    ac80278a584e6186c3f697bdc0f25402bcd55531328647416cc7ed4f7a1ee4ca

  • SHA512

    9aa24e6dcaebc04bb151ac7c0abbde064b55ef91963684c16337740899da1fc97b1078c27554615e27b73d5b4a66f458be843cdd81a39af791e71d5a606c06a8

  • SSDEEP

    6144:1QlMjnumZM3jYgW5WeuXkgRYWof2JV9IBmokdiztGLP:1QlGHmj9W5CX5R88AtQ

Score
10/10
macro

Malware Config

Targets

    • Target

      375fb1c82e6dbe8d6b3ef2b2bffb73a6_JaffaCakes118

    • Size

      315KB

    • MD5

      375fb1c82e6dbe8d6b3ef2b2bffb73a6

    • SHA1

      227d2126f31503ceaa73254dae6a1d50b62f3f3f

    • SHA256

      ac80278a584e6186c3f697bdc0f25402bcd55531328647416cc7ed4f7a1ee4ca

    • SHA512

      9aa24e6dcaebc04bb151ac7c0abbde064b55ef91963684c16337740899da1fc97b1078c27554615e27b73d5b4a66f458be843cdd81a39af791e71d5a606c06a8

    • SSDEEP

      6144:1QlMjnumZM3jYgW5WeuXkgRYWof2JV9IBmokdiztGLP:1QlGHmj9W5CX5R88AtQ

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks