Overview

overview

10

Static

static

1

9a61b87e8f...18.doc

windows7-x64

10

9a61b87e8f...18.doc

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    9a61b87e8fa59338d740809f69c9e4f5_JaffaCakes118
  • Size 303KB
  • Sample240610-fbda8acb7t
  • SHA256 94eb055dd2c9d3e339e4c12764b8f7242d4a1fe33a08e7f7820ade8c357faf93
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Language

  • ps1

Deobfuscated
Source
URLs
  • exe.dropper

    http://idjvn.com/VFRvAVWyF8
  • exe.dropper

    http://constructiondistrict.com/zA0jHm2vt
  • exe.dropper

    http://www.bspartage.com/MofXXfVq
  • exe.dropper

    http://adam-ch.com/OMKLfD9mZC
  • exe.dropper

    http://galeriakolash.com.ve/RlGVXxAvx

Targets

    • Target
      9a61b87e8fa59338d740809f69c9e4f5_JaffaCakes118
    • Size 303KB
    • SHA256 94eb055dd2c9d3e339e4c12764b8f7242d4a1fe33a08e7f7820ade8c357faf93
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10

    • Blocklisted process makes network request

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks