Overview

overview

10

Static

static

8

c84def5c37...18.doc

windows7-x64

10

c84def5c37...18.doc

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c84def5c375569b443780a693a3d7dbe_JaffaCakes118

  • Size

    100KB

  • Sample

    240829-gb1beswdmb

  • MD5

    c84def5c375569b443780a693a3d7dbe

  • SHA1

    ec806430c0a78d5e1af41bc98b828274eae5af0e

  • SHA256

    c2c6c63271228e95c0c401bd7efd45781970c4001507271ff6ef61bcefa9176b

  • SHA512

    8ff35f5ec0907c30af48a719dd6ddf482403ab3f5341fe83f6d56a65fa51e939eb4b944936e75321fced139a398f4c1c013f48020d217aecf4b069b5a568054e

  • SSDEEP

    1536:yPYdANgW0zHZNC+agKLtevdLkjBSAImAu8qqFtjdz15sA:w0ANtsvsUv+BSAImKtj11uA

Score
10/10
discoverymacro

Malware Config

Targets

    • Target

      c84def5c375569b443780a693a3d7dbe_JaffaCakes118

    • Size

      100KB

    • MD5

      c84def5c375569b443780a693a3d7dbe

    • SHA1

      ec806430c0a78d5e1af41bc98b828274eae5af0e

    • SHA256

      c2c6c63271228e95c0c401bd7efd45781970c4001507271ff6ef61bcefa9176b

    • SHA512

      8ff35f5ec0907c30af48a719dd6ddf482403ab3f5341fe83f6d56a65fa51e939eb4b944936e75321fced139a398f4c1c013f48020d217aecf4b069b5a568054e

    • SSDEEP

      1536:yPYdANgW0zHZNC+agKLtevdLkjBSAImAu8qqFtjdz15sA:w0ANtsvsUv+BSAImKtj11uA

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks