General

  • Target

    666a16b049f3a00371215eba9f077b95_JaffaCakes118

  • Size

    3.9MB

  • Sample

    240522-hxbevsfh5v

  • MD5

    666a16b049f3a00371215eba9f077b95

  • SHA1

    00a0e60c55c53dd669f0202c16f4d2d8e2874c33

  • SHA256

    8db139ac1f5c566fda6de1e374ce560de79d32fa831ea914396b22a6e86868d8

  • SHA512

    3f0ef337051a116109d461b2554354db7ad9f5e45b26ae7bca4e28355c93537f411cf47f87897136e2849a338300415403c74eb9b5da0b187236d97685ab5d43

  • SSDEEP

    24576:J/NffCu7Js8hdfej6odyRmfxBydeZrqC7EpReOuBBpR6xP6rA1A054CD:hCYfeOuj6xPH1Ae

Score
10/10

Malware Config

Targets

    • Target

      666a16b049f3a00371215eba9f077b95_JaffaCakes118

    • Size

      3.9MB

    • MD5

      666a16b049f3a00371215eba9f077b95

    • SHA1

      00a0e60c55c53dd669f0202c16f4d2d8e2874c33

    • SHA256

      8db139ac1f5c566fda6de1e374ce560de79d32fa831ea914396b22a6e86868d8

    • SHA512

      3f0ef337051a116109d461b2554354db7ad9f5e45b26ae7bca4e28355c93537f411cf47f87897136e2849a338300415403c74eb9b5da0b187236d97685ab5d43

    • SSDEEP

      24576:J/NffCu7Js8hdfej6odyRmfxBydeZrqC7EpReOuBBpR6xP6rA1A054CD:hCYfeOuj6xPH1Ae

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks