Overview

overview

10

Static

static

8

749042d083...18.doc

windows7-x64

10

749042d083...18.doc

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    749042d0832ad213c28d2222a1b403e4_JaffaCakes118

  • Size

    179KB

  • Sample

    240726-sjce4svfqp

  • MD5

    749042d0832ad213c28d2222a1b403e4

  • SHA1

    84171e967cf6c9f1df44f8faaaa497171146fcaf

  • SHA256

    0bab91b3290a63c14f2bcc134e89c47b520f8e09d97d1771ec2c2506dce0a57e

  • SHA512

    d6ca8426c881d642eaf9bcc9cf3e1c0c82cbb8e48f89012cee30a9e84e0aebc3ea34980357ff707ee84271f5d7eeaa7eee8d323fb543bddce785b0f1db89e80e

  • SSDEEP

    3072:lr9qO4vcaSVmX1mnUaghvw5tyOM89g0hBh8/Km6pgVu+:TqO6caSn9ghY5t7hjhBh8imH

Score
10/10
discoverymacro

Malware Config

Targets

    • Target

      749042d0832ad213c28d2222a1b403e4_JaffaCakes118

    • Size

      179KB

    • MD5

      749042d0832ad213c28d2222a1b403e4

    • SHA1

      84171e967cf6c9f1df44f8faaaa497171146fcaf

    • SHA256

      0bab91b3290a63c14f2bcc134e89c47b520f8e09d97d1771ec2c2506dce0a57e

    • SHA512

      d6ca8426c881d642eaf9bcc9cf3e1c0c82cbb8e48f89012cee30a9e84e0aebc3ea34980357ff707ee84271f5d7eeaa7eee8d323fb543bddce785b0f1db89e80e

    • SSDEEP

      3072:lr9qO4vcaSVmX1mnUaghvw5tyOM89g0hBh8/Km6pgVu+:TqO6caSn9ghY5t7hjhBh8imH

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Use of msiexec (install) with remote resource

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks