Overview

overview

10

Static

static

1

820073e32c...18.doc

windows7-x64

10

820073e32c...18.doc

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    820073e32ca05335ab8a61156130338b_JaffaCakes118

  • Size

    151KB

  • Sample

    240801-2jc63szcql

  • MD5

    820073e32ca05335ab8a61156130338b

  • SHA1

    3278c6557ca953af066e5f9a10ce78bd010b2069

  • SHA256

    de59e3702c57121f05f1118e444ddc475d182adaa11c98c5cb254a7c2ac6281e

  • SHA512

    5d3814f37186eb842da9158e0ffd22dada387b0e5b12cbedf962a0d6add1f5dfe86cc07a07d8f1e033cd14af3bc1fdb9cfaccd4f5f3edd2283a9297299acbbd3

  • SSDEEP

    1536:8H1DB445TEgrO3jSWAg83tle1ZZ0293QM0eetR2cOupLB5UZ5J+a9hiYFHC3qoXc:O22TWTogk079THcpOu5UZjVdCVtBQ6W

Score
10/10
discovery

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://priyamcollection.com/cab/f/
exe.dropper

http://querofornecedores.com/wp-includes/images/D/
exe.dropper

https://hulianwang114.com/attachment/c/
exe.dropper

http://ixirhost.xyz/wp-content/z/
exe.dropper

https://weneedyourhelpnow.org/wp-content/LJ/
exe.dropper

https://averyair.com/wp-content/J/
exe.dropper

https://drippglobal.com/wp-content/rV/

Targets

    • Target

      820073e32ca05335ab8a61156130338b_JaffaCakes118

    • Size

      151KB

    • MD5

      820073e32ca05335ab8a61156130338b

    • SHA1

      3278c6557ca953af066e5f9a10ce78bd010b2069

    • SHA256

      de59e3702c57121f05f1118e444ddc475d182adaa11c98c5cb254a7c2ac6281e

    • SHA512

      5d3814f37186eb842da9158e0ffd22dada387b0e5b12cbedf962a0d6add1f5dfe86cc07a07d8f1e033cd14af3bc1fdb9cfaccd4f5f3edd2283a9297299acbbd3

    • SSDEEP

      1536:8H1DB445TEgrO3jSWAg83tle1ZZ0293QM0eetR2cOupLB5UZ5J+a9hiYFHC3qoXc:O22TWTogk079THcpOu5UZjVdCVtBQ6W

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks