Overview

overview

10

Static

static

1

c81e28ee2a...18.rtf

windows7-x64

3

c81e28ee2a...18.rtf

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c81e28ee2a38a65f0817abe5ce4296f1_JaffaCakes118

  • Size

    198KB

  • Sample

    240829-djgx9s1ald

  • MD5

    c81e28ee2a38a65f0817abe5ce4296f1

  • SHA1

    0059afe71d034d9d4c906b8dd06b1c4e22c936cc

  • SHA256

    66ffdf64b7b06bbdc3a560e6024eeda9b2c341716e373a1229a0d202dbd9e5ed

  • SHA512

    b8c469a0a0db34f1e2e22ab33448e0b6f3b310488ac4625d3c640a3b180d2729b314a6fbc68fbf8a766833eafb90031cf76f0974b5e55e0b8b48b08741905ca1

  • SSDEEP

    3072:q6el3lYo30RHTY6QzHIl3lYo30RHTY6QzHV:yl3lYokRHTY6Wol3lYokRHTY6W1

Score
10/10
discovery

Malware Config

Targets

    • Target

      c81e28ee2a38a65f0817abe5ce4296f1_JaffaCakes118

    • Size

      198KB

    • MD5

      c81e28ee2a38a65f0817abe5ce4296f1

    • SHA1

      0059afe71d034d9d4c906b8dd06b1c4e22c936cc

    • SHA256

      66ffdf64b7b06bbdc3a560e6024eeda9b2c341716e373a1229a0d202dbd9e5ed

    • SHA512

      b8c469a0a0db34f1e2e22ab33448e0b6f3b310488ac4625d3c640a3b180d2729b314a6fbc68fbf8a766833eafb90031cf76f0974b5e55e0b8b48b08741905ca1

    • SSDEEP

      3072:q6el3lYo30RHTY6QzHIl3lYo30RHTY6QzHV:yl3lYokRHTY6Wol3lYokRHTY6W1

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks