General
-
Target
ed1d2ec94052a01a82dc41386c67fa95_JaffaCakes118
-
Size
58KB
-
Sample
240920-jd1q3svfne
-
MD5
ed1d2ec94052a01a82dc41386c67fa95
-
SHA1
26b80c542713e53d2258ea3b271c4c9a3e1e1147
-
SHA256
0c24602274c0afda05197250336fbecd64a2afef887a39f3a714acf727e28c52
-
SHA512
90a3a7eae17f5c0d8d37ffcc408f1790b6e08bda43b51fb0491f35ab03627f9ac6ceb43b6db5ffe8363eccb83f027aecff587a76427889008d3f265e070e330c
-
SSDEEP
1536:Oihz0DewjEXWfCDIM/V5xtezEsi8OUM+tfNaIZEpqpXouv:Oihz0DewjEXWfCDIM/V5xtezEsi8OUMu
Behavioral task
behavioral1
Sample
ed1d2ec94052a01a82dc41386c67fa95_JaffaCakes118.xls
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ed1d2ec94052a01a82dc41386c67fa95_JaffaCakes118.xls
Resource
win10v2004-20240802-en
Malware Config
Extracted
http://www.psicheaurora.it/fanta/download.php
Targets
-
-
Target
ed1d2ec94052a01a82dc41386c67fa95_JaffaCakes118
-
Size
58KB
-
MD5
ed1d2ec94052a01a82dc41386c67fa95
-
SHA1
26b80c542713e53d2258ea3b271c4c9a3e1e1147
-
SHA256
0c24602274c0afda05197250336fbecd64a2afef887a39f3a714acf727e28c52
-
SHA512
90a3a7eae17f5c0d8d37ffcc408f1790b6e08bda43b51fb0491f35ab03627f9ac6ceb43b6db5ffe8363eccb83f027aecff587a76427889008d3f265e070e330c
-
SSDEEP
1536:Oihz0DewjEXWfCDIM/V5xtezEsi8OUM+tfNaIZEpqpXouv:Oihz0DewjEXWfCDIM/V5xtezEsi8OUMu
Score10/10-
Process spawned unexpected child process
This typically indicates the parent process was compromised via an exploit or macro.
-