General
-
Target
701b816309429adca3a7c278b89b7dcc_JaffaCakes118
-
Size
58KB
-
Sample
240725-sj4jlawbpn
-
MD5
701b816309429adca3a7c278b89b7dcc
-
SHA1
0c2b5849949b4708ede63ba8f560eb6632ffbfda
-
SHA256
31f32aa38a987ca660553f3ed615c44f096e23ff80192a7922f273b1e474858b
-
SHA512
b62ecf30f7d3abe541a38f5f3614093d4a5c8b6e53b8aac68ac323bae28ef565c2bb0a719c3974ca79ad59a4d12c8bae68e56428227a7da8d4bda454aed4cf0c
-
SSDEEP
1536:Oihz0DewjEXWfCDIM/V5xtezEsi8OUM+tfNaIZEpqpXouZ:Oihz0DewjEXWfCDIM/V5xtezEsi8OUMA
Behavioral task
behavioral1
Sample
701b816309429adca3a7c278b89b7dcc_JaffaCakes118.xls
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
701b816309429adca3a7c278b89b7dcc_JaffaCakes118.xls
Resource
win10v2004-20240709-en
Malware Config
Extracted
http://www.psicheaurora.it/fanta/download.php
Targets
-
-
Target
701b816309429adca3a7c278b89b7dcc_JaffaCakes118
-
Size
58KB
-
MD5
701b816309429adca3a7c278b89b7dcc
-
SHA1
0c2b5849949b4708ede63ba8f560eb6632ffbfda
-
SHA256
31f32aa38a987ca660553f3ed615c44f096e23ff80192a7922f273b1e474858b
-
SHA512
b62ecf30f7d3abe541a38f5f3614093d4a5c8b6e53b8aac68ac323bae28ef565c2bb0a719c3974ca79ad59a4d12c8bae68e56428227a7da8d4bda454aed4cf0c
-
SSDEEP
1536:Oihz0DewjEXWfCDIM/V5xtezEsi8OUM+tfNaIZEpqpXouZ:Oihz0DewjEXWfCDIM/V5xtezEsi8OUMA
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-