Overview

overview

10

Static

static

8

d68746ebcb...18.doc

windows7-x64

10

d68746ebcb...18.doc

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d68746ebcb6ac5af836544b4ce3ae2b3_JaffaCakes118

  • Size

    68KB

  • Sample

    240909-r3l8zstcml

  • MD5

    d68746ebcb6ac5af836544b4ce3ae2b3

  • SHA1

    6889ed93be08ac689a3e35fd55bfc5a2b6bb7b9e

  • SHA256

    d5e5f1c88b98b55284ee3f91dd7380f6e221a336079b2fe669bda50e42e24bb0

  • SHA512

    6ed9155d121cfc4f2144fdaab8aa1b1094f7ed46a174f0d3413a6fb386447ca319c997131bffc958be1b39bb1484d8af35c1462f976559befbfd661c9c93e96c

  • SSDEEP

    768:sTBSVucRFoqkp59YBvLdTv9ReVi4eFov5UHRFBt+1o9tcK2tAcnBnip:s9Socn1kp59gxBK85fBt+a96PB

Score
10/10
discoverymacro

Malware Config

Targets

    • Target

      d68746ebcb6ac5af836544b4ce3ae2b3_JaffaCakes118

    • Size

      68KB

    • MD5

      d68746ebcb6ac5af836544b4ce3ae2b3

    • SHA1

      6889ed93be08ac689a3e35fd55bfc5a2b6bb7b9e

    • SHA256

      d5e5f1c88b98b55284ee3f91dd7380f6e221a336079b2fe669bda50e42e24bb0

    • SHA512

      6ed9155d121cfc4f2144fdaab8aa1b1094f7ed46a174f0d3413a6fb386447ca319c997131bffc958be1b39bb1484d8af35c1462f976559befbfd661c9c93e96c

    • SSDEEP

      768:sTBSVucRFoqkp59YBvLdTv9ReVi4eFov5UHRFBt+1o9tcK2tAcnBnip:s9Socn1kp59gxBK85fBt+a96PB

    Score
    10/10
    discovery

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks