General
-
Target
8e38ae77c152ce9c9d94e1c98361dedb_JaffaCakes118
-
Size
58KB
-
Sample
240602-qncwbsdd4t
-
MD5
8e38ae77c152ce9c9d94e1c98361dedb
-
SHA1
08c295d15d6032e7a55d317866e304a1e3670006
-
SHA256
ef64729cf6131df48fdadb861e7963fd3122e884bc75bc83d34d71718843b0bb
-
SHA512
ccb5dfab9414f7420893868996266d3b7576ea7c4e03c290d85f1ed381510abb0bbf9855f985eedf7fd2db7e77e2acaca632a35cb25d49f3b34ccdc14e905343
-
SSDEEP
1536:BiZ+C6w7T812pqqaRhy1djPB5h3bdVrzzN4t/qv1:B/G380pwnM1r5bzZu81
Behavioral task
behavioral1
Sample
8e38ae77c152ce9c9d94e1c98361dedb_JaffaCakes118.docm
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8e38ae77c152ce9c9d94e1c98361dedb_JaffaCakes118.docm
Resource
win10v2004-20240426-en
Malware Config
Extracted
http://66.55.133.84/REX/slick.php?utma=itantion2
Extracted
http://auwhguahsdusahdsd.com/REX/slick.php?utma=itantion2
Targets
-
-
Target
8e38ae77c152ce9c9d94e1c98361dedb_JaffaCakes118
-
Size
58KB
-
MD5
8e38ae77c152ce9c9d94e1c98361dedb
-
SHA1
08c295d15d6032e7a55d317866e304a1e3670006
-
SHA256
ef64729cf6131df48fdadb861e7963fd3122e884bc75bc83d34d71718843b0bb
-
SHA512
ccb5dfab9414f7420893868996266d3b7576ea7c4e03c290d85f1ed381510abb0bbf9855f985eedf7fd2db7e77e2acaca632a35cb25d49f3b34ccdc14e905343
-
SSDEEP
1536:BiZ+C6w7T812pqqaRhy1djPB5h3bdVrzzN4t/qv1:B/G380pwnM1r5bzZu81
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request
-