General
-
Target
98ec0fe3e7e17df06c766f6e4d7e5a3b_JaffaCakes118
-
Size
132KB
-
Sample
240605-w7glhsfc43
-
MD5
98ec0fe3e7e17df06c766f6e4d7e5a3b
-
SHA1
239a7bad2957d1d7e15426c927d8ccd1834387f8
-
SHA256
ef3738867469a3467ef046cd16397e2a00145eda1ab9c66e7dc30910dad10509
-
SHA512
f9485eb16e58b4554f44fad68bb70e16c0b7f5bead062ec3b9571dec63678c6257b806c79e64717aa07b686f332caddef96a86bfc2449906a5bafe77b60b996f
-
SSDEEP
3072:ic8GhDS0o9zTGOZD6EbzCdXcE6ErJQbc:iioUOZDlbeX1zrJV
Behavioral task
behavioral1
Sample
98ec0fe3e7e17df06c766f6e4d7e5a3b_JaffaCakes118.doc
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
98ec0fe3e7e17df06c766f6e4d7e5a3b_JaffaCakes118.doc
Resource
win10v2004-20240508-en
Malware Config
Extracted
http://delhifabrics.com/dvPxItY
http://kaiteelao.com/ZiN8rdvvMj
http://altayusa.com/wvvccw/IKYMK5Soc
http://meunasahmesjid.desa.id/NB0K5EE
http://likaami.com/49GakoBi
Targets
-
-
Target
98ec0fe3e7e17df06c766f6e4d7e5a3b_JaffaCakes118
-
Size
132KB
-
MD5
98ec0fe3e7e17df06c766f6e4d7e5a3b
-
SHA1
239a7bad2957d1d7e15426c927d8ccd1834387f8
-
SHA256
ef3738867469a3467ef046cd16397e2a00145eda1ab9c66e7dc30910dad10509
-
SHA512
f9485eb16e58b4554f44fad68bb70e16c0b7f5bead062ec3b9571dec63678c6257b806c79e64717aa07b686f332caddef96a86bfc2449906a5bafe77b60b996f
-
SSDEEP
3072:ic8GhDS0o9zTGOZD6EbzCdXcE6ErJQbc:iioUOZDlbeX1zrJV
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request
-