Overview

overview

10

Static

static

1

88fce4d1e2...18.doc

windows7-x64

10

88fce4d1e2...18.doc

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    88fce4d1e2aa2f410f858e46cbad8b98_JaffaCakes118

  • Size

    152KB

  • Sample

    240811-e29lnsygph

  • MD5

    88fce4d1e2aa2f410f858e46cbad8b98

  • SHA1

    7096d89bb0a29500aeb390237f8d0d1a7c1ddc2b

  • SHA256

    0b102ec43b4bf3d7459491664e5c2f731286d92134e87e00967a144e59c28ad0

  • SHA512

    26bb408bc03c5914c559c6eb3b5b18994b46226d55144fe70892a4b3c2e5559a52e653faca85aa328ca87c051ddd780d673e7479438a271142dab289b3a5e4d0

  • SSDEEP

    1536:hAkT3yRFGEv0QtKPaOtMPAquK1gLadmpsHkkyeY+tB445TEgrO3jSWAg83tle1ZP:022TWTogk079THcpOu5UZ+aEuV

Score
10/10
discovery

Malware Config

Extracted

Language
ps1
Source
URLs
exe.dropper

http://www.firhajshoes.com/wp-admin/RgaiT/
exe.dropper

http://fakeread.com/OneSignal-Web-SDK-HTTPS-Integration-Files/Wf/
exe.dropper

http://www.rttutoring.com/wp-includes/LlbY6o/
exe.dropper

http://blueskysol.com/sys-cache/2Rk/
exe.dropper

http://crazyboxs.com/cgi-bin/IaJ/
exe.dropper

http://www.paramedicaleducationguidelines.com/wp-admin/3jXU5Bp/
exe.dropper

http://nuhatoys.com/wp-admin/WWA4R/

Targets

    • Target

      88fce4d1e2aa2f410f858e46cbad8b98_JaffaCakes118

    • Size

      152KB

    • MD5

      88fce4d1e2aa2f410f858e46cbad8b98

    • SHA1

      7096d89bb0a29500aeb390237f8d0d1a7c1ddc2b

    • SHA256

      0b102ec43b4bf3d7459491664e5c2f731286d92134e87e00967a144e59c28ad0

    • SHA512

      26bb408bc03c5914c559c6eb3b5b18994b46226d55144fe70892a4b3c2e5559a52e653faca85aa328ca87c051ddd780d673e7479438a271142dab289b3a5e4d0

    • SSDEEP

      1536:hAkT3yRFGEv0QtKPaOtMPAquK1gLadmpsHkkyeY+tB445TEgrO3jSWAg83tle1ZP:022TWTogk079THcpOu5UZ+aEuV

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks