General
-
Target
62267a2d58c8093978a82e5df7fee049JaffaCakes118
-
Size
207KB
-
Sample
240523-as7nhaeh86
-
MD5
62267a2d58c8093978a82e5df7fee049
-
SHA1
706a48ac51f6a949c3d059cbd6c8504b6b15dacb
-
SHA256
66560ecae1fa34327556f3a3ae7c82915435249b023141c390a3f52c3f460a20
-
SHA512
ea59715ace2b51bbf00e7598324e9919dbf969b30e6b5bb5712d4ec3a060c5bd6a78ec6001e5bf535ef8e1fcf9e888622685cc84977fce50d39a6d95fa0c7346
-
SSDEEP
3072:E3MMsXSi54XEmpDP4NaNJgj+H8AbliNKDzaJFUKc0UTE7yZRUV7RJeOzi8F:ms5WX1jFu88AbAEDzYUTE7yZRVUi8F
Static task
static1
Behavioral task
behavioral1
Sample
62267a2d58c8093978a82e5df7fee049JaffaCakes118.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
62267a2d58c8093978a82e5df7fee049JaffaCakes118.doc
Resource
win10v2004-20240426-en
Malware Config
Extracted
http://miamifloridainvestigator.com/48R8nccw
http://yusufsevim.com/4aj5f63E
http://dogmencyapi.com/fzmtCEgz
http://myvidio.site/zeAtqnKQbF
http://comeinitiative.org/krh8mzC
Targets
-
-
Target
62267a2d58c8093978a82e5df7fee049JaffaCakes118
-
Size
207KB
-
MD5
62267a2d58c8093978a82e5df7fee049
-
SHA1
706a48ac51f6a949c3d059cbd6c8504b6b15dacb
-
SHA256
66560ecae1fa34327556f3a3ae7c82915435249b023141c390a3f52c3f460a20
-
SHA512
ea59715ace2b51bbf00e7598324e9919dbf969b30e6b5bb5712d4ec3a060c5bd6a78ec6001e5bf535ef8e1fcf9e888622685cc84977fce50d39a6d95fa0c7346
-
SSDEEP
3072:E3MMsXSi54XEmpDP4NaNJgj+H8AbliNKDzaJFUKc0UTE7yZRUV7RJeOzi8F:ms5WX1jFu88AbAEDzYUTE7yZRVUi8F
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request
-