Overview

overview

10

Static

static

8

83f7de6c3d...18.doc

windows7-x64

10

83f7de6c3d...18.doc

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    83f7de6c3d538d51b8613280814afbd7_JaffaCakes118

  • Size

    80KB

  • Sample

    240530-mydzlaff75

  • MD5

    83f7de6c3d538d51b8613280814afbd7

  • SHA1

    da737881c06cd8683fda591d75b4b921d45ee1d0

  • SHA256

    42a94da72f7b97475490d2f94e8dd70a3dd7b588abb35b1e7117bd7ea222c3e9

  • SHA512

    061170590c879d94da91b15fcb32cdd7825fcd27d58ccdd91b8de424d8cbb03b88e88a6e7e124b1e71cb67c1bfc7463d1f3024761447d5f6426af6269ac5d51c

  • SSDEEP

    768:2eWVucRFoqkp59YBvLdTv9ReVi4eFov5UHRFBt+1o93nvcF18J88:2eWocn1kp59gxBK85fBt+a9U2

Score
10/10
macro

Malware Config

Targets

    • Target

      83f7de6c3d538d51b8613280814afbd7_JaffaCakes118

    • Size

      80KB

    • MD5

      83f7de6c3d538d51b8613280814afbd7

    • SHA1

      da737881c06cd8683fda591d75b4b921d45ee1d0

    • SHA256

      42a94da72f7b97475490d2f94e8dd70a3dd7b588abb35b1e7117bd7ea222c3e9

    • SHA512

      061170590c879d94da91b15fcb32cdd7825fcd27d58ccdd91b8de424d8cbb03b88e88a6e7e124b1e71cb67c1bfc7463d1f3024761447d5f6426af6269ac5d51c

    • SSDEEP

      768:2eWVucRFoqkp59YBvLdTv9ReVi4eFov5UHRFBt+1o93nvcF18J88:2eWocn1kp59gxBK85fBt+a9U2

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks