General
-
Target
ea9710ee72c0a97b25a8a19dfa410d59_JaffaCakes118
-
Size
162KB
-
Sample
240919-e5vlxs1djd
-
MD5
ea9710ee72c0a97b25a8a19dfa410d59
-
SHA1
7135f74209d48edf7a72bf86324a586dd3bb683b
-
SHA256
98dbf4dffc10dd183a60e1fc7f89ada397f31f8bf1af4205ed10b45bbc8475d4
-
SHA512
c3934f027ad8ca89272742b7f17cebadb365f768cd4538837f274ede36bdee0bba9e85a7a9dd66c966fa83616a115fbddbd2500353313db9e084430a1f7d9375
-
SSDEEP
1536:VxYAcBPFEiUSQH/P7HgOdPTQlmncksPsrbfPchzb8JRD3bNqfNpu39IId5a6XP3i:PR1qf69xak3MgxCZ/ZIb0X+RrMgY
Static task
static1
Behavioral task
behavioral1
Sample
ea9710ee72c0a97b25a8a19dfa410d59_JaffaCakes118.doc
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea9710ee72c0a97b25a8a19dfa410d59_JaffaCakes118.doc
Resource
win10v2004-20240802-en
Malware Config
Extracted
http://transfersuvan.com/wp-admin/1J/
http://da-industrial.com/js/aX/
http://daprofesional.com/data4/aE/
http://degepro.com/eTrac/px/
http://hoagietesting10.com/wp-content/a/
https://lifeadvicer.com/wp-content/FX/
https://bangkokcityjewel.com/cgi-bin/F3/
Targets
-
-
Target
ea9710ee72c0a97b25a8a19dfa410d59_JaffaCakes118
-
Size
162KB
-
MD5
ea9710ee72c0a97b25a8a19dfa410d59
-
SHA1
7135f74209d48edf7a72bf86324a586dd3bb683b
-
SHA256
98dbf4dffc10dd183a60e1fc7f89ada397f31f8bf1af4205ed10b45bbc8475d4
-
SHA512
c3934f027ad8ca89272742b7f17cebadb365f768cd4538837f274ede36bdee0bba9e85a7a9dd66c966fa83616a115fbddbd2500353313db9e084430a1f7d9375
-
SSDEEP
1536:VxYAcBPFEiUSQH/P7HgOdPTQlmncksPsrbfPchzb8JRD3bNqfNpu39IId5a6XP3i:PR1qf69xak3MgxCZ/ZIb0X+RrMgY
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request
-
Drops file in System32 directory
-