Overview

overview

10

Static

static

8

9225e38cb2...18.doc

windows7-x64

10

9225e38cb2...18.doc

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9225e38cb2ac8cc72f65d862e5dd7003_JaffaCakes118

  • Size

    75KB

  • Sample

    240603-r3b31shh3x

  • MD5

    9225e38cb2ac8cc72f65d862e5dd7003

  • SHA1

    ec6e48118f62f5e4c9322bab9b6bf5a36a336751

  • SHA256

    dda6fd8390483974892ef7423b44d74f843e32cfa3d15716fc8a5d554075b892

  • SHA512

    c0ab7843d9353718a8a44a71883b988e12f351427f28c5705d24481875dfc2dd90d847f4881e1b1b66359c525501429c22488cc908cd711c284f7ea13077343a

  • SSDEEP

    768:sTBSVucRFoqkp59YBvLdTv9ReVi4eFov5UHRFBt+1o9tcD2tAcnBnip:s9Socn1kp59gxBK85fBt+a9rPB

Score
10/10
macro

Malware Config

Targets

    • Target

      9225e38cb2ac8cc72f65d862e5dd7003_JaffaCakes118

    • Size

      75KB

    • MD5

      9225e38cb2ac8cc72f65d862e5dd7003

    • SHA1

      ec6e48118f62f5e4c9322bab9b6bf5a36a336751

    • SHA256

      dda6fd8390483974892ef7423b44d74f843e32cfa3d15716fc8a5d554075b892

    • SHA512

      c0ab7843d9353718a8a44a71883b988e12f351427f28c5705d24481875dfc2dd90d847f4881e1b1b66359c525501429c22488cc908cd711c284f7ea13077343a

    • SSDEEP

      768:sTBSVucRFoqkp59YBvLdTv9ReVi4eFov5UHRFBt+1o9tcD2tAcnBnip:s9Socn1kp59gxBK85fBt+a9rPB

    Score
    10/10

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks