General
-
Target
666a16b049f3a00371215eba9f077b95_JaffaCakes118
-
Size
3.9MB
-
Sample
240522-hxbevsfh5v
-
MD5
666a16b049f3a00371215eba9f077b95
-
SHA1
00a0e60c55c53dd669f0202c16f4d2d8e2874c33
-
SHA256
8db139ac1f5c566fda6de1e374ce560de79d32fa831ea914396b22a6e86868d8
-
SHA512
3f0ef337051a116109d461b2554354db7ad9f5e45b26ae7bca4e28355c93537f411cf47f87897136e2849a338300415403c74eb9b5da0b187236d97685ab5d43
-
SSDEEP
24576:J/NffCu7Js8hdfej6odyRmfxBydeZrqC7EpReOuBBpR6xP6rA1A054CD:hCYfeOuj6xPH1Ae
Behavioral task
behavioral1
Sample
666a16b049f3a00371215eba9f077b95_JaffaCakes118.doc
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
666a16b049f3a00371215eba9f077b95_JaffaCakes118.doc
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
666a16b049f3a00371215eba9f077b95_JaffaCakes118
-
Size
3.9MB
-
MD5
666a16b049f3a00371215eba9f077b95
-
SHA1
00a0e60c55c53dd669f0202c16f4d2d8e2874c33
-
SHA256
8db139ac1f5c566fda6de1e374ce560de79d32fa831ea914396b22a6e86868d8
-
SHA512
3f0ef337051a116109d461b2554354db7ad9f5e45b26ae7bca4e28355c93537f411cf47f87897136e2849a338300415403c74eb9b5da0b187236d97685ab5d43
-
SSDEEP
24576:J/NffCu7Js8hdfej6odyRmfxBydeZrqC7EpReOuBBpR6xP6rA1A054CD:hCYfeOuj6xPH1Ae
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-