General
-
Target
ecc07f170e61717e1004f0898f8cec3e_JaffaCakes118
-
Size
162KB
-
Sample
240920-dzq6wawgqq
-
MD5
ecc07f170e61717e1004f0898f8cec3e
-
SHA1
4493f46e2ddbd7525a84bb722f62dd6e4312fd89
-
SHA256
886c89c24607623a2d19bc97ea142d0ae166bce904aec28bd51c20871ac9cc72
-
SHA512
c010f04233e5653bcf707ac06b6157cf64fcad656ffedd0c35d217679ad736d032809c8fa93e2c431856ab8877085b8cc2690c262aa15c504998815045f77e85
-
SSDEEP
1536:VxYAcBPFEiUSQH/P7HgOdPTQlmncksPsrbfPchzb8JRD3bNqfNpu39IId5a6XP3M:PR1qf69xak3MgxCX/ZIb0X+RrMgY
Static task
static1
Behavioral task
behavioral1
Sample
ecc07f170e61717e1004f0898f8cec3e_JaffaCakes118.doc
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ecc07f170e61717e1004f0898f8cec3e_JaffaCakes118.doc
Resource
win10v2004-20240802-en
Malware Config
Extracted
http://transfersuvan.com/wp-admin/1J/
http://da-industrial.com/js/aX/
http://daprofesional.com/data4/aE/
http://degepro.com/eTrac/px/
http://hoagietesting10.com/wp-content/a/
https://lifeadvicer.com/wp-content/FX/
https://bangkokcityjewel.com/cgi-bin/F3/
Targets
-
-
Target
ecc07f170e61717e1004f0898f8cec3e_JaffaCakes118
-
Size
162KB
-
MD5
ecc07f170e61717e1004f0898f8cec3e
-
SHA1
4493f46e2ddbd7525a84bb722f62dd6e4312fd89
-
SHA256
886c89c24607623a2d19bc97ea142d0ae166bce904aec28bd51c20871ac9cc72
-
SHA512
c010f04233e5653bcf707ac06b6157cf64fcad656ffedd0c35d217679ad736d032809c8fa93e2c431856ab8877085b8cc2690c262aa15c504998815045f77e85
-
SSDEEP
1536:VxYAcBPFEiUSQH/P7HgOdPTQlmncksPsrbfPchzb8JRD3bNqfNpu39IId5a6XP3M:PR1qf69xak3MgxCX/ZIb0X+RrMgY
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-
Blocklisted process makes network request
-
Drops file in System32 directory
-